Question
You have an Azure virtual machine named VM1 that runs Windows Server.
You need to ensure that administrators request access to VM1 before establishing a Remote Desktop connection.
What should you configure?
- A. Azure Front Door
- B. Microsoft Defender for Cloud Correct
- C. Azure AD Privileged Identity Management (PIM)
- D. a network security group (NSG)
Explanation
Just-in-time (JIT) VM access in Microsoft Defender for Cloud (Defender for Servers Plan 2) locks down inbound management ports such as RDP 3389 with deny rules in the VM's network security group. An administrator must request access to VM1. Defender for Cloud checks the user's Azure RBAC permissions and, if the request is approved, opens the port for the requester's IP address for a limited time, then restores the rules. Azure AD Privileged Identity Management controls activation of role assignments, not network access to the VM. An NSG on its own has no request workflow. Azure Front Door is a global HTTP load balancer and does not handle RDP.
