SIMULATION Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in…

Submitted by rohit_dlh· Mar 6, 2026Implement and manage virtual networking - Configure network security groups and manage inbound/outbound security rules to control access to Azure Virtual Machines (AZ-104 / AZ-900 Networking & Security Domain)

Question

SIMULATION Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in the Enter password box and click on the password below. Azure Username: [email protected] Azure Password: Ag1Bh9!#Bd The following information is for technical support purposes only: Lab Instance: 10598168 You need to configure Azure to allow RDP connections from the Internet to a virtual machine named VM1. The solution must minimize the attack surface of VM1. To complete this task, sign in to the Azure portal. Answer: To enable the RDP port in an NSG, follow these steps: 1. Sign in to the Azure portal. 2. In Virtual Machines, select VM1 3. In Settings, select Networking. 4. In Inbound port rules, check whether the port for RDP is set correctly. The following is an example of the configuration: Priority: 300 Name: Port_3389 Port(Destination): 3389 Protocol: TCP Source: Any Destinations: Any Action: Allow Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/troubleshoot-rdp-nsg- problem

Exhibits

Explanation

The correct solution uses Azure's Network Security Group (NSG) to create an inbound security rule allowing TCP port 3389 (RDP) from the Internet, which is the standard Microsoft-recommended approach for enabling RDP access. Configuring this at the NSG level rather than directly on the VM minimizes attack surface by providing a centralized, manageable network-layer firewall without exposing unnecessary ports or services. The specific configuration (Priority 300, TCP, port 3389, Source: Any) ensures the rule is processed correctly while keeping other ports closed.

Topics

#Network Security Groups (NSG)#RDP Access Control#Azure Virtual Machines#Inbound Port Rules

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice