You have an Azure virtual machine named VM1 that runs Windows Server. You need to perform the following tasks on VM1: - Configure Windows Defender Firewall to allow Remote Desktop connections, - Confi

Question

Explanation

This question tests knowledge of two distinct Azure/Windows Server VM configuration areas: OS-level firewall management for Remote Desktop Protocol (RDP) access, and Azure-level boot diagnostics configuration for console log storage.

Approach. For allowing Remote Desktop connections through the firewall, the correct setting is 'Windows Defender Firewall with Advanced Security' (Inbound Rules) - specifically enabling the built-in Remote Desktop rule that opens TCP port 3389. This is configured inside the guest OS. For configuring where VM console logs are stored, the correct setting is 'Boot diagnostics' under the VM's 'Support + troubleshooting' blade in the Azure portal - this allows you to specify an Azure Storage Account where serial console output and screenshots are saved. These are two separate control planes: one is inside the Windows OS, the other is an Azure platform feature.

Concept tested. Azure VM management across two control planes - guest OS configuration (Windows Defender Firewall inbound rules for RDP/port 3389) and Azure platform configuration (Boot diagnostics storage account for VM console logs). Candidates must distinguish which settings live inside the OS versus in the Azure portal.

Reference. https://learn.microsoft.com/en-us/azure/virtual-machines/boot-diagnostics

No community discussion yet for this question.