Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft AZ-140 Exam - Topic 4 Question 78 Discussion

You have an Azure Virtual Desktop deployment that contains the resources shown in the following table.You need to enable just-in-time (JIT) VM access for all the session hosts.What should you do first?
B) Assign network security groups (NSGs) to the network interfaces of the five session hosts.
A) Deploy Azure Bastion to VNET1.
C) Configure Access control (IAM) for HostPool1.
D) Assign a network security group (NSG) to Subnet1.

Microsoft AZ-140 Exam - Topic 4 Question 78 Discussion

Actual exam question for Microsoft's AZ-140 exam
Question #: 78
Topic #: 4
[All AZ-140 Questions]

You have an Azure Virtual Desktop deployment that contains the resources shown in the following table.

You need to enable just-in-time (JIT) VM access for all the session hosts.

What should you do first?

Show Suggested Answer Hide Answer
Suggested Answer: B

In order to deploy a VPN gateway to VNet1, you should first add a subnet named GatewaySubnet to VNet1. According to the Microsoft Official Guide AZ-140, 'You must create a gateway subnet for the virtual network that you plan to use for the gateway. The subnet must be named GatewaySubnet and it must use an address range that is large enough to accommodate the number of IP addresses that you plan to use for the gateway and its supporting resources.' Therefore, the first step to ensure that you can deploy the VPN gateway is to add a subnet named GatewaySubnet to VNet1.


by Lai at Aug 27, 2024, 08:36 PM

Limited Time Offer

25%

Off

Get Premium AZ-140 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Carolann
10 months ago
Not sure if assigning NSGs to the interfaces is enough.
upvoted 0 times
...
Annmarie
10 months ago
Wait, can you even do JIT without NSGs?
upvoted 0 times
...
Louis
10 months ago
Definitely NSGs, that’s standard practice.
upvoted 0 times
...
France
10 months ago
I think deploying Azure Bastion is the way to go!
upvoted 0 times
...
Denise
10 months ago
You need to set up NSGs for the session hosts first.
upvoted 0 times
...
Yan
11 months ago
Assigning an NSG to Subnet1 seems like a good option, but I wonder if it’s the most effective way to enable JIT access for all session hosts.
upvoted 0 times
...
Irving
11 months ago
I’m a bit confused about whether we should configure IAM settings or focus on NSGs first. I feel like both are important for security.
upvoted 0 times
...
Whitley
11 months ago
I remember practicing a similar question where we had to set up security for VMs, and I think deploying Azure Bastion was part of it. Could that be the first step here?
upvoted 0 times
...
Erick
11 months ago
I think we might need to assign NSGs to the network interfaces first, but I'm not entirely sure if that’s the right approach for JIT access.
upvoted 0 times
...
Audry
11 months ago
I'm a bit confused on this one. The options seem to be talking about network security groups, access control, and subnets, but I'm not sure how those relate to enabling JIT VM access. I'll need to think this through carefully.
upvoted 0 times
...
Alesia
11 months ago
Alright, this seems straightforward. I think the answer is to deploy Azure Bastion to VNET1 to enable the JIT VM access. That's the first step we need to take, right?
upvoted 0 times
...
Cristen
11 months ago
Okay, let's see. We need to enable JIT VM access, so I'm guessing we need to do something related to network security or access control. I'm a bit unsure about the right approach here, but I'll carefully read through the options.
upvoted 0 times
...
Emogene
11 months ago
Hmm, this looks like it's testing our understanding of Azure Virtual Desktop security features. I think the key here is to enable just-in-time (JIT) VM access, so I'll need to carefully consider the options.
upvoted 0 times
...
Charlene
11 months ago
Okay, I think I've got it. The key here is to configure the access control (IAM) for HostPool1 to enable the JIT VM access. That seems like the most direct way to address the requirement.
upvoted 0 times
...
Marguerita
11 months ago
Ah, this is the kind of question I was hoping to see! I've reviewed the details of this incident, so I'm confident I can identify the key lesson learned.
upvoted 0 times
...
Latonia
12 months ago
I remember discussing AWS Shield in class, but it was mainly about DDoS protection, not really XSS issues, right?
upvoted 0 times
...
Sharen
1 year ago
This is a tough one, but I'm leaning towards Option A. Deploying Azure Bastion seems like it could be the quickest way to get that JIT access enabled. Plus, it's always fun to play with new Azure services, am I right?
upvoted 0 times
An
1 year ago
I agree. Let's go with Option A and deploy Azure Bastion to VNET1 for JIT VM access.
upvoted 0 times
...
Fannie
1 year ago
True, but I believe Azure Bastion is specifically designed for secure access to Azure VMs. It might be the best option in this case.
upvoted 0 times
...
Ria
1 year ago
But what about Option B? Assigning NSGs to the network interfaces could also help secure the session hosts.
upvoted 0 times
...
Miriam
1 year ago
I think Option A is a good choice. Azure Bastion can provide secure and seamless RDP and SSH access to your VMs.
upvoted 0 times
...
...
Kattie
1 year ago
Haha, I bet the exam writers are trying to trick us with these options. I'm going with Option C just to be different. Who needs network security when you've got access control, am I right?
upvoted 0 times
Yasuko
1 year ago
User3: I see your point, but I'm sticking with Option C. Access control for the win!
upvoted 0 times
...
Quentin
1 year ago
User2: I agree, security first! I'm going with Option B as well.
upvoted 0 times
...
Tiera
1 year ago
User1: I think I'll go with Option B. NSGs on the network interfaces seem like a good first step.
upvoted 0 times
...
...
Remedios
1 year ago
Hmm, I'm not sure about that. I think Option D might be the better choice here. Applying an NSG to the subnet could be more efficient than doing it individually for each host.
upvoted 0 times
Erasmo
1 year ago
That's true, but applying it to the subnet could save time and effort in the long run.
upvoted 0 times
...
Marcelle
1 year ago
But wouldn't it be better to assign NSGs to each host individually for more control?
upvoted 0 times
...
Kathryn
1 year ago
I think Option D is a good choice. It would apply the NSG to the whole subnet.
upvoted 0 times
...
...
Hillary
1 year ago
I think Option B is the way to go. Assigning NSGs to the session host network interfaces seems like the logical first step to enable JIT VM access.
upvoted 0 times
Pamella
1 year ago
User2: Definitely, it's important to secure the network traffic before enabling JIT VM access.
upvoted 0 times
...
Francene
1 year ago
User1: I agree, assigning NSGs to the network interfaces of the session hosts is the first step.
upvoted 0 times
...
...
Lisandra
1 year ago
But enabling JIT VM access requires secure access, so deploying Azure Bastion would be the best option.
upvoted 0 times
...
Page
1 year ago
I disagree, I believe we should assign network security groups (NSGs) to the network interfaces of the session hosts.
upvoted 0 times
...
Lisandra
1 year ago
I think we should first deploy Azure Bastion to VNET1.
upvoted 0 times
...

Save Cancel