Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.
I understand that you would like to migrate to classic NSG from ACLs in existing Azure classic VM.
NSG and ACL co-existence is not supported in classic VMs.
In case you would like to attach a classic NSG to the VM, you must make sure the ACLs are removed from the endPoint.
This means, there is no concept of one being preferred over the other.
Thanks,
Kapil
Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.