What should you do?

You need to ensure that users can access VM0. The solution must meet the platform protection requirements.

What should you do?
A . Move VM0 to Subnet1.
B . On Firewall, configure a network traffic filtering rule.
C . Assign RT1 to AzureFirewallSubnet.
D . On Firewall, configure a DNAT rule.

Answer: D

Explanation:

https://docs.microsoft.com/en-us/azure/firewall/tutorial-firewall-dnat