Question
You plan to deploy an Azure virtual machine that will run Windows Server.
You need to ensure that an Azure Active Directory (Azure AD) user named User1 can connect to the virtual machine by using the Azure Serial
Console.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Explanation
Configure on the Azure virtual machine: Boot diagnostics with a custom storage account — the Azure Serial Console attaches to the VM's serial port through the boot diagnostics channel, so boot diagnostics must be enabled on the VM before the console will connect; without it the Serial Console reports that it is unavailable. Operating system guest diagnostics only collects in-guest performance counters and logs through the diagnostics extension and does nothing for serial port access, and a system-assigned managed identity governs how the VM authenticates to other Azure resources, not how an administrator reaches its console.
Assign the following role to User1: Virtual Machine Contributor — access to the Serial Console requires at minimum the Virtual Machine Contributor role on the virtual machine, because opening the console is a control-plane operation on the VM resource rather than a guest sign-in. Virtual Machine Administrator Login and Virtual Machine User Login only grant Azure AD-based sign-in rights inside the guest over RDP or SSH (as a local administrator or as a standard user, respectively) and do not carry the resource-level permission needed to open the Serial Console.
