Examice

Exam AZ-500 All QuestionsBrowse all questions from this exam

Question 79

You have an Azure subscription that contains virtual machines.

You enable just in time (JIT) VM access to all the virtual machines.

You need to connect to a virtual machine by using Remote Desktop.

What should you do first?

From Azure Directory (Azure AD) Privileged Identity Management (PIM), activate the Security administrator user role.

From Azure Active Directory (Azure AD) Privileged Identity Management (PIM), activate the Owner role for the virtual machine.

From the Azure portal, select the virtual machine, select Connect, and then select Request access.

From the Azure portal, select the virtual machine and add the Network Watcher Agent virtual machine extension.

Correct Answer: C

When Just-in-Time (JIT) VM access is enabled, the first step to connect to a virtual machine using Remote Desktop is to request access from the Azure portal. This involves selecting the virtual machine, clicking on 'Connect,' and then selecting 'Request access.' This process temporarily opens the required network ports for a limited time, allowing the user to connect to the VM securely.

Discussion

Exam_Master_MeOption: C

Correct, https://docs.microsoft.com/nl-nl/azure/security-center/security-center-just-in-time

PintoOption: C

C. https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time?tabs=jit-config-asc%2Cjit-request-asc

zic04

Agree correct

tuta

correct

EltoothOption: C

C is correct answer.

majstor86Option: C

C. From the Azure portal, select the virtual machine, select Connect, and then select Request access.

Alessandro365Option: C

correct answer

ESAJRROption: C

C. From the Azure portal, select the virtual machine, select Connect, and then select Request access.

nqwangOption: C

correct answer

rohitmedi

correct answer

abcd1234000

correct

LazyEngineer

Correct

workhardOption: C

https://learn.microsoft.com/en-us/azure/defender-for-cloud/just-in-time-access-usage#request-access-to-a-jit-enabled-vm-from-the-azure-virtual-machines-connect-page

TheProfessorOption: C

Correct Answer: C

zellckOption: C

C is the answer. https://learn.microsoft.com/en-us/azure/defender-for-cloud/just-in-time-access-usage#request-access-to-a-jit-enabled-vm-from-microsoft-defender-for-cloud

mohamed1999Option: B

you need owner rights first on te vm to change the rules in the nsg, so i guess it is B

mohamed1999

I see it now, you need to request it form "Microsoft Defender for Cloud" and not from PIM.

OpsecDude

But the question is not mentioning any changes to any NSG that might affect the VM, just an access request after configuring JIT