A public load balancer is distributing traffic for ports 80 and 443 across three VMs (VM1, VM2, VM3). You must ensure that all RDP connections are forwarded only to VM3. Which configuration should you use?

An inbound NAT rule is the correct choice because it allows you to forward specific traffic (like RDP on port 3389) from the load balancer's public IP and port to a specific private IP and port of a backend VM. This ensures RDP connections are directed exclusively to VM3, bypassing the load balancing distribution. A new public load balancer for VM3 is unnecessary and adds complexity and cost; the existing load balancer can handle this. A frontend IP configuration defines the public IP address for the load balancer but doesn't dictate how specific traffic is routed to backend VMs. A load balancing rule distributes traffic across multiple backend instances based on a defined algorithm, which is not suitable for directing all RDP traffic to a single, specific VM.