Based on Azure networking capabilities, network security groups (NSGs) can be associated with either a network interface (NIC) or a subnet. They cannot be directly associated with a virtual machine (VM), virtual network (VNet), or load balancer (LB).

 Based on Azure networking capabilities, network security groups (NSGs) can be associated with either a network interface (NIC) or a subnet. They cannot be directly associated with a virtual machine (VM), virtual network (VNet), or load balancer (LB).