AZ-140: Configuring and Operating Microsoft Azure Virtual DesktopDemo

By Microsoft · Question Mode

QuestionQ48

Plan and implement identity and security

You have an Azure Virtual Desktop deployment containing the resources shown in the following table.

Question Image

You need to enable just-in-time (JIT) VM access for every session host.

What should you do first?

  • A Deploy Azure Bastion to VNET1.
  • B Assign network security groups (NSGs) to the network interfaces of the five session hosts.
  • C Configure Access control (IAM) for HostPool1.
  • D Assign a network security group (NSG) to Subnet1.
Explanation

Just-in-time VM access uses Network Security Group rules to restrict management ports and temporarily permit approved inbound access. Because all five session hosts are connected to Subnet1, associating an NSG with that subnet applies the required network control to all of them. Microsoft Learn: Just-in-time machine access

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!