nerdexam
MicrosoftMicrosoft

AZ-500 · Question #271

AZ-500 Question #271: Real Exam Question with Answer & Explanation

Sign in or unlock AZ-500 to reveal the answer and full explanation for question #271. The question stem and answer options stay visible for context.

Submitted by paula_co· Mar 6, 2026Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel

Question

You have an Azure subscription that contains a resource group named RG1 and a security group named ServerAdmins. RG1 contains 10 virtual machines, a virtual network named VNET1, and a network security group (NSG) named NSG1. ServerAdmins can access the virtual machines by using RDP. You need to ensure that NSG1 only allows RDP connections to the virtual machines for a maximum of 60 minutes when a member of ServerAdmins requests access. What should you configure?

Options

  • Aan Azure policy assigned to RG1
  • Ba just in time (JIT) VM access policy in Azure Security Center
  • Can Azure Active Directory (Azure AD) Privileged Identity Management (PIM) role assignment
  • Dan Azure Bastion host on VNET1

Unlock AZ-500 to see the answer

You've previewed enough free AZ-500 questions. Unlock AZ-500 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Just-in-Time (JIT) VM Access#Microsoft Defender for Cloud#Network Security Groups (NSG)#RDP Security
Full AZ-500 PracticeBrowse All AZ-500 Questions