A user connection fails. The investigator needs to correlate the relevant AVD connection events. What should be available?

1. Appropriate diagnostic logs in a configured analysis destination
2. Only an unrelated successful connection
3. Only the user's wallpaper image
4. Only a list of VM costs