SC-100: Microsoft Cybersecurity ArchitectDemo

By Microsoft · Question Mode

QuestionQ302

Design security solutions for infrastructure

You have an Azure subscription with 100 virtual machines, accessed by using Azure Bastion.

You need to recommend a solution that ensures only particular users in particular locations can access the virtual machines. The solution must meet these requirements:

  • Restrict virtual-machine access by originating IP address or connection request by using just-in-time (JIT) VM access network-based controls.
  • Restrict virtual-machine access through role-based access control (RBAC) role assignments by using JIT VM access authorization controls.

Which Microsoft cloud services should be included in the recommendation?

Select
For the network controls:
For the authorization controls:
Explanation

Microsoft Defender for Cloud provides JIT VM access and can limit temporary inbound access to specified source IP addresses. Microsoft Entra PIM provides eligible, time-bound Azure RBAC assignments that users activate just in time.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!