AZ-800 · Question #52
You have an Azure virtual machine named VM1 that runs Windows Server. You need to configure the management of VM1 to meet the following requirements: Require administrators to request access to VM1…
The correct answer is C. Microsoft Defender for Cloud. Microsoft Defender for Cloud provides Just-In-Time (JIT) VM Access, which satisfies all three requirements: (1) administrators must submit an access request before an RDP connection is allowed, (2) access can be restricted to specific source IP addresses, and (3) access is…
Question
You have an Azure virtual machine named VM1 that runs Windows Server. You need to configure the management of VM1 to meet the following requirements:
Require administrators to request access to VM1 before establishing a Remote Desktop connection. Limit access to VM1 from specific source IP addresses. Limit access to VM1 to a specific management port. What should you configure?
Options
- Aa network security group (NSG)
- BAzure Active Directory (Azure AD) Privileged Identity Management (PIM)
- CMicrosoft Defender for Cloud
- DAzure Front Door
How the community answered
(31 responses)- A10% (3)
- B3% (1)
- C84% (26)
- D3% (1)
Explanation
Microsoft Defender for Cloud provides Just-In-Time (JIT) VM Access, which satisfies all three requirements: (1) administrators must submit an access request before an RDP connection is allowed, (2) access can be restricted to specific source IP addresses, and (3) access is limited to specific ports (e.g., TCP 3389). A Network Security Group (NSG) can restrict IPs and ports but has no request-based access workflow. Azure AD PIM manages privileged role access, not network-level VM connectivity. Azure Front Door is a global load balancer and CDN, unrelated to VM management access control.
Topics
Community Discussion
No community discussion yet for this question.