Correct Answer: Enable Just-In-Time (JIT) VM Access and approve a timed-access request for legitimate RDP
Just-In-Time VM Access closes management ports (RDP 3389, SSH 22) by default using NSG deny rules. Access is granted only for a specified time window to specific IP addresses when ...
Correct Answer
Enable Just-In-Time (JIT) VM Access and approve a timed-access request for legitimate RDP
Why This Answer Is Correct
Just-In-Time VM Access closes management ports (RDP 3389, SSH 22) by default using NSG deny rules. Access is granted only for a specified time window to specific IP addresses when a legitimate user requests it. This eliminates persistent open management ports that attackers scan for, immediately reducing the brute force attack surface.
This question evaluates your knowledge of Microsoft Defender for Cloud — a core concept tested in Microsoft Certified: Azure Security Engineer Associate (AZ-500). Understanding Microsoft Defender for Cloud is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Microsoft Defender for Cloud shows several security recommendations but you are overwhelmed by the volume. You need to focus first on the recommendations that would have the greatest impact on your Secure Score. Which approach should you take?
You need to ensure all Azure VMs in a subscription have Microsoft Defender for Endpoint automatically installed as they are provisioned, including VMs created by other teams. You manage security centrally. Which Defender for Cloud feature provides this?