SC-100 · Question #23
You need to design a solution to provide administrators with secure remote access to the virtual machines. The solution must meet the following requirements: - Prevent the need to enable ports 3389…
The correct answer is D. Enable just-in-time (JIT) VM access. E. Configure Azure Bastion. The correct answers are Enable Just-in-Time (JIT) VM access (D) and Configure Azure Bastion (E). Azure Bastion (E) provides browser-based RDP and SSH access to VMs directly through the Azure portal over TLS port 443, eliminating the need to open ports 3389 or 22 from the…
Question
You need to design a solution to provide administrators with secure remote access to the virtual machines. The solution must meet the following requirements:
- Prevent the need to enable ports 3389 and 22 from the internet.
- Only provide permission to connect the virtual machines when
required.
- Ensure that administrators use the Azure portal to connect to the
virtual machines. Which two actions should you include in the solution? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Options
- AEnable Azure Active Directory (Azure AD) Privileged Identity Management (PIM) roles as virtual
- BConfigure Azure VPN Gateway.
- CEnable Just Enough Administration (JEA).
- DEnable just-in-time (JIT) VM access.
- EConfigure Azure Bastion.
How the community answered
(26 responses)- A4% (1)
- B4% (1)
- C12% (3)
- D81% (21)
Explanation
The correct answers are Enable Just-in-Time (JIT) VM access (D) and Configure Azure Bastion (E). Azure Bastion (E) provides browser-based RDP and SSH access to VMs directly through the Azure portal over TLS port 443, eliminating the need to open ports 3389 or 22 from the internet and satisfying the portal-access requirement. JIT VM access (D) locks down management ports on the VM's NSG by default and only opens them temporarily when an administrator explicitly requests access, satisfying the 'only when required' requirement. Azure AD PIM (A) manages privileged role elevation but does not directly control VM port access. Azure VPN Gateway (B) connects on-premises networks to Azure but does not restrict or time-gate individual VM port access. Just Enough Administration (C) is a PowerShell remoting feature for constraining administrative sessions but does not address port exposure or portal-based access.
Topics
Community Discussion
No community discussion yet for this question.