From VM2, you must request access before you can establish a Remote Desktop connection to VM1.

The correct answer is B. No. VM2 does not need to request Just-in-Time access before establishing an RDP connection to VM1 because the existing network security configuration already permits direct RDP traffic from VM2.

Secure Windows Server on-premises and hybrid infrastructures

Question

From VM2, you must request access before you can establish a Remote Desktop connection to VM1.

Options

AYes
BNo
C
D

How the community answered

(45 responses)

A
2% (1)
B
96% (43)
C
2% (1)

Why each option

VM2 does not need to request Just-in-Time access before establishing an RDP connection to VM1 because the existing network security configuration already permits direct RDP traffic from VM2.

AYes

Answering Yes would imply that JIT access control is enforced on the path from VM2 to VM1, requiring a time-limited port-open request before RDP is permitted, which contradicts the network security group or subnet configuration shown in the scenario.

BNoCorrect

The statement is false. Based on the network configuration in the scenario - such as VM2 residing in the same subnet as VM1 or an NSG rule explicitly allowing RDP from VM2's address range - the connection can be established directly without submitting a JIT access request through Microsoft Defender for Cloud.

Concept tested: Azure JIT VM access and NSG RDP rules

Source: https://learn.microsoft.com/en-us/azure/defender-for-cloud/just-in-time-access-overview

Topics

#Remote Desktop#VM connectivity#Server access#Authentication

Community Discussion

No community discussion yet for this question.

Full AZ-801 Practice