ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-140 All Questions

View all questions & answers for the AZ-140 exam
Go to Exam

Exam AZ-140 topic 3 question 17 discussion

Actual exam question from Microsoft's AZ-140
Question #: 17
Topic #: 3
[All AZ-140 Questions]

You have an Azure Virtual Desktop deployment that contains the resources shown in the following table.



You need to enable just-in-time (JIT) VM access for all the session hosts.

What should you do first?

  • A. Deploy Azure Bastion to VNET1.
  • B. Assign network security groups (NSGs) to the network interfaces of the five session hosts.
  • C. Configure Access control (IAM) for HostPool1.
  • D. Assign a network security group (NSG) to Subnet1.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
by ZokiZokic2023 at Feb. 1, 2023, 11:42 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
P4l127
8 months ago
By design the NSG is not deployed on subnet so if this is not stated other way B is correct since NSG is assigned to every network adapter of the VM
upvoted 1 times
sergioandreslq
1 month, 1 week ago
I went to Subnet and I was able to add the NSG. So, I prefer D instead B because it is more scalable. B going one-by-one is not recommended.
upvoted 1 times
...
...
ESAJRR
10 months ago
Selected Answer: D
D. Assign a network security group (NSG) to Subnet1
upvoted 3 times
...
mcclane654
1 year, 1 month ago
Selected Answer: D
https://learn.microsoft.com/en-us/azure/defender-for-cloud/just-in-time-access-overview?tabs=defender-for-container-arch-aks#how-defender-for-cloud-identifies-which-vms-should-have-jit-applied Unable to test but best pratice would be to have NSG on the network. and think it should fufill this criteria
upvoted 1 times
...
Leocan
1 year, 5 months ago
Selected Answer: D
It's Microsoft's suggestion.
upvoted 2 times
...
Kalzonee3611
1 year, 5 months ago
This question is absolute peak Microsoft. Anyway IMO its: D
upvoted 2 times
...
jr_luciano
1 year, 5 months ago
Selected Answer: D
Correct answer, letter D
upvoted 2 times
...
tristamm16
1 year, 5 months ago
Selected Answer: D
This question makes no sense, and I have a hard time believe it's on the exam. Why would you need to enable Just In Time Access for an AVD environment? Also, even if you were to enable JIT access, you wouldn't need an NSG for each session host. You would assign the same NSG to the subnet, and in turn it will apply to each host.
upvoted 3 times
...
tristamm16
1 year, 5 months ago
This question makes no sense, and I have a hard time believe it's on the exam. Why would you need to enable Just In Time Access for an AVD environment? Also, even if you were to enable JIT access, you wouldn't need an NSG for each session host. You would assign the same NSG to the subnet, and in turn it will apply to each host.
upvoted 1 times
...
hydrillo
1 year, 6 months ago
Selected Answer: D
Assign NSGs to each session host doesn't makes sense to a management pov.
upvoted 2 times
...
17Master
1 year, 9 months ago
Selected Answer: B
Correct, https://stefanos.cloud/kb/how-to-configure-just-in-time-jit-access-for-an-azure-vm/
upvoted 3 times
...
ZokiZokic2023
1 year, 9 months ago
Selected Answer: B
Answer is correct. https://learn.microsoft.com/en-us/azure/defender-for-cloud/just-in-time-access-usage
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago