Answer: Outbound from VM1 to VM2, Priority 110

To ensure VM1 can ping VM2, you need to allow ICMP traffic from VM1 to VM2. The NSG rules are stateful, meaning that if the outbound traffic is allowed, the corresponding inbound traffic will automatically be allowed. Therefore, the rule should be configured with direction as Outbound, source as 10.1.0.10 (VM1), and destination as 10.1.0.11 (VM2) with a priority of 110 to override any existing deny rules. This configuration achieves the principle of least privilege by allowing only the necessary traffic while blocking all other traffic by default.

Author: LeetQuiz Editorial Team