Microsoft Azure Administrator Associate AZ-104 Practice Question

To enable remote management from your on-premises network, you need to create a security rule that allows inbound traffic from your on-premises network to the virtual machine. This is achieved by configuring a Network Security Group (NSG) to permit the necessary inbound traffic on the required ports (such as port 3389 for Remote Desktop Protocol (RDP) or port 5985 for Windows Remote Management). Opening ports in the Windows Firewall on the virtual machine (Option A) may not help if the NSG is blocking the traffic. Matching the virtual network's address space to the on-premises network (Option B) can cause IP conflicts and is not a solution. Assigning a public IP and connecting over the internet (Option D) is unnecessary and less secure when a VPN is already established.