A technician noticed a VM that is used for testing software was configured to allow RDP access on a public firewall. Which of the following should the technician execute to fix this issue?

Disabling the firewall entirely would expose all ports and services of the VM to the public internet, drastically increasing its attack surface and worsening the security posture instead of fixing it.

Connecting the VM to a VPN provides a secure method for legitimate remote access but does not by itself remove the existing public firewall rule allowing direct RDP access, thus failing to fix the initial vulnerability.

While disabling all ports would include port 3389, it is an overly broad action that could disrupt other necessary internal services or testing processes on the VM, making it an unacceptably severe solution when a specific fix is available.