You have an Azure virtual machine named VM1 that runs Windows Server. You need to ensure that administrators request access to VM1 before establishing a Remote Desktop connection. What should you…

Question

Options

• AAzure Front Door
• BMicrosoft Defender for Cloud
• CAzure AD Privileged Identity Management (PIM)
• Da network security group (NSG)

• A
  10% (3)
• B
  80% (24)
• C
  3% (1)
• D
  7% (2)

Explanation

Microsoft Defender for Cloud includes Just-in-Time (JIT) VM Access, which forces administrators to explicitly request time-limited RDP access to a VM before connecting - exactly what the question requires. When JIT is enabled, the management port (3389) is blocked by default and only opened temporarily upon approved request.

Why the distractors are wrong:

• A (Azure Front Door): A CDN/load balancing service for web apps - has nothing to do with VM access control.
• C (Azure AD PIM): Controls role elevation for Azure AD roles and resources, not VM connection requests specifically. PIM governs "who can become an admin," not "who can RDP right now."
• D (NSG): Can block/allow RDP traffic statically, but cannot enforce a request-and-approval workflow - it's just a firewall rule set.

Memory tip: Think "Defender = Defender of the door" - JIT makes every admin knock and wait before entering VM1, and Defender for Cloud is the bouncer managing that door. If a question mentions "request access before connecting," always think JIT → Defender for Cloud.

No community discussion yet for this question.