SC-100 · Question #112
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might…
The correct answer is B. No. The answer is No. The Secure management ports controls in the Azure Security Benchmark V3 are primarily improved by enabling Just-in-Time (JIT) VM access in Microsoft Defender for Cloud. JIT restricts open management ports (like RDP port 3389 and SSH port 22) by default and…
Question
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription that has Microsoft Defender for Cloud enabled. You are evaluating the Azure Security Benchmark V3 report. In the Secure management ports controls, you discover that you have 0 out of a potential 8 points. You need to recommend configurations to increase the score of the Secure management ports controls. Solution: You recommend enabling the VM Access extension on all virtual machines. Does this meet the goal?
Options
- AYes
- BNo
How the community answered
(46 responses)- A20% (9)
- B80% (37)
Explanation
The answer is No. The Secure management ports controls in the Azure Security Benchmark V3 are primarily improved by enabling Just-in-Time (JIT) VM access in Microsoft Defender for Cloud. JIT restricts open management ports (like RDP port 3389 and SSH port 22) by default and only opens them on-demand for authorized users for a limited time window. Whatever solution is described in this truncated question does not achieve that targeted control. JIT VM access is the direct and correct mechanism to score points in the Secure management ports category.
Topics
Community Discussion
No community discussion yet for this question.