SC-100: Microsoft Cybersecurity ArchitectDemo

By Microsoft · Question Mode

QuestionQ28

Design security solutions for infrastructure

You have an Azure subscription containing an Azure Bastion host and 100 Windows Server 2022 virtual machines. Microsoft Defender for Servers Plan 2 is enabled on the virtual machines.

Recommend a virtual-machine security solution that meets these requirements:

  • Administrators must request RDP access to the virtual machines through the Azure portal.
  • Remote Desktop sessions must be restricted to a maximum of three hours.
  • Agentless scanning must be scheduled for every virtual machine.

What should you recommend using?

Select
To manage RDP access:
To perform agentless scanning:
Explanation

Just-in-time (JIT) VM access is the Defender for Cloud feature that keeps management ports closed and requires administrators to request RDP access through the Azure portal, granting time-bound access with a configurable maximum duration (default three hours), which meets both the request-through-portal and three-hour limit requirements. For agentless scanning the correct engine is Microsoft Defender Vulnerability Management: agentless machine scanning in Defender for Servers Plan 2 takes disk snapshots and analyzes them with integrated Defender Vulnerability Management, with no agent installed. The Qualys and Rapid7 scanners are agent/extension-based (BYOL) solutions and the integrated Qualys scanner is deprecated, so they do not satisfy the agentless requirement.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!