Explain how you would configure an NSG to restrict traffic between two specific subnets for an Avanade deployment.