You have an Azure environment that contains 10 virtual networks and 100 virtual machines.

You need to limit the amount of inbound traffic to all the Azure virtual networks.

What should you create?

A. one network security group (NSG)
B. 10 virtual network gateways
C. 10 Azure ExpressRoute circuits

D. one Azure firewall