Instance-level allow and deny rules restrict which peers can reach a virtual machine's network interface in a city VPC. Which control matches that description?
Select an answer to reveal the explanation.
Short Explanation
Security groups (or similar instance firewalls) are the bouncer at the VM's NIC—only the peers and ports you allow get in. DNS proofs, cost alerts, and license headers do not filter packets. Pin down who can talk to that interface and on which port.
Full Explanation
Network security groups (NSGs) and comparable instance firewall rules attach to network interfaces or instance associations to allow or deny traffic by source/destination and port. They provide host-adjacent filtering distinct from subnet NACLs. DNS TXT records, cost alerts, and license headers do not enforce packet filtering. Cloud+ security controls include instance-level network security group rules.