What happens if you have the 2 same inbound rules in Azure Network Security Group, besides 2 difference - the first rule has priority 1000 and it has Deny action, the second rule has priority 1001 and has Allow action.