Practice Test 4 | Microsoft Azure Security Technologies | AZ-500 | Dumps | Mock Test
A company has an Azure subscription that contains Azure virtual machines. The company does not want to modify the inbound rule of NSG for port 3389. They have decided to enable Just-In-Time VM access to all Virtual Machines.
The IT Administrator decides to select the Virtual Machine in the Security Center blade of the Azure portal and click “Request Access”. He then opened port 3389 by specifying IP Range and the “Time Range”.
Can the IT administrator be able to connect the virtual machine by using Remote Desktop from accessing the selected IP Range during the specified time?
A. Yes
B. No
Correct Answer – A
Here the company does not want to modify the NSG rules. Currently, the NSG rule does not whitelist RDP port 3389.
Now the IT administrator may require to RDP the system during Business hours to support the team.
To accomplish this, JIT can be used which will whitelist port 3389 using business hours.
JIT in time will modify the NSG rule to whitelist port 3389 during business hours by creating a new rule and will automatically delete the same rule after a business hour automatically, without manual interference.
With the help of JIT of Security Center, we can connect a VM over a defined port, even that port is not whitelisted in NSG.
For more information on Just-In-Time VM Access, please refer to the below link-
Comments are closed, but trackbacks and pingbacks are open.