MENU
You have an Azure Virtual Desktop deployment that contains the resources shown in the following table.
You need to enable just-in-time (JIT) VM access for all the session hosts.
What should you do first?
Suggested Answer: B
Get Premium AZ-140 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
In order to deploy a VPN gateway to VNet1, you should first add a subnet named GatewaySubnet to VNet1. According to the Microsoft Official Guide AZ-140, 'You must create a gateway subnet for the virtual network that you plan to use for the gateway. The subnet must be named GatewaySubnet and it must use an address range that is large enough to accommodate the number of IP addresses that you plan to use for the gateway and its supporting resources.' Therefore, the first step to ensure that you can deploy the VPN gateway is to add a subnet named GatewaySubnet to VNet1.
35 comments · newest first
CA
Carolann
11 months ago
Not sure if assigning NSGs to the interfaces is enough.
AN
Annmarie
11 months ago
Wait, can you even do JIT without NSGs?
LO
Louis
11 months ago
Definitely NSGs, that’s standard practice.
FR
France
12 months ago
I think deploying Azure Bastion is the way to go!
DE
Denise
12 months ago
You need to set up NSGs for the session hosts first.
YA
Yan
1 year ago
Assigning an NSG to Subnet1 seems like a good option, but I wonder if it’s the most effective way to enable JIT access for all session hosts.
IR
Irving
1 year ago
I’m a bit confused about whether we should configure IAM settings or focus on NSGs first. I feel like both are important for security.
WH
Whitley
1 year ago
I remember practicing a similar question where we had to set up security for VMs, and I think deploying Azure Bastion was part of it. Could that be the first step here?
ER
Erick
1 year ago
I think we might need to assign NSGs to the network interfaces first, but I'm not entirely sure if that’s the right approach for JIT access.
AU
Audry
1 year ago
I'm a bit confused on this one. The options seem to be talking about network security groups, access control, and subnets, but I'm not sure how those relate to enabling JIT VM access. I'll need to think this through carefully.
AL
Alesia
1 year ago
Alright, this seems straightforward. I think the answer is to deploy Azure Bastion to VNET1 to enable the JIT VM access. That's the first step we need to take, right?
CR
Cristen
1 year ago
Okay, let's see. We need to enable JIT VM access, so I'm guessing we need to do something related to network security or access control. I'm a bit unsure about the right approach here, but I'll carefully read through the options.
EM
Emogene
1 year ago
Hmm, this looks like it's testing our understanding of Azure Virtual Desktop security features. I think the key here is to enable just-in-time (JIT) VM access, so I'll need to carefully consider the options.
CH
Charlene
1 year ago
Okay, I think I've got it. The key here is to configure the access control (IAM) for HostPool1 to enable the JIT VM access. That seems like the most direct way to address the requirement.
MA
Marguerita
1 year ago
Ah, this is the kind of question I was hoping to see! I've reviewed the details of this incident, so I'm confident I can identify the key lesson learned.
LA
Latonia
1 year ago
I remember discussing AWS Shield in class, but it was mainly about DDoS protection, not really XSS issues, right?
SH
Sharen
1 year ago
This is a tough one, but I'm leaning towards Option A. Deploying Azure Bastion seems like it could be the quickest way to get that JIT access enabled. Plus, it's always fun to play with new Azure services, am I right?
AN
An
1 year ago
I agree. Let's go with Option A and deploy Azure Bastion to VNET1 for JIT VM access.
FA
Fannie
1 year ago
True, but I believe Azure Bastion is specifically designed for secure access to Azure VMs. It might be the best option in this case.
RI
Ria
1 year ago
But what about Option B? Assigning NSGs to the network interfaces could also help secure the session hosts.
MI
Miriam
1 year ago
I think Option A is a good choice. Azure Bastion can provide secure and seamless RDP and SSH access to your VMs.
KA
Kattie
1 year ago
Haha, I bet the exam writers are trying to trick us with these options. I'm going with Option C just to be different. Who needs network security when you've got access control, am I right?
YA
Yasuko
1 year ago
User3: I see your point, but I'm sticking with Option C. Access control for the win!
QU
Quentin
1 year ago
User2: I agree, security first! I'm going with Option B as well.
TI
Tiera
1 year ago
User1: I think I'll go with Option B. NSGs on the network interfaces seem like a good first step.
RE
Remedios
1 year ago
Hmm, I'm not sure about that. I think Option D might be the better choice here. Applying an NSG to the subnet could be more efficient than doing it individually for each host.
ER
Erasmo
1 year ago
That's true, but applying it to the subnet could save time and effort in the long run.
MA
Marcelle
1 year ago
But wouldn't it be better to assign NSGs to each host individually for more control?
KA
Kathryn
1 year ago
I think Option D is a good choice. It would apply the NSG to the whole subnet.
HI
Hillary
2 years ago
I think Option B is the way to go. Assigning NSGs to the session host network interfaces seems like the logical first step to enable JIT VM access.
PA
Pamella
1 year ago
User2: Definitely, it's important to secure the network traffic before enabling JIT VM access.
FR
Francene
1 year ago
User1: I agree, assigning NSGs to the network interfaces of the session hosts is the first step.
LI
Lisandra
2 years ago
But enabling JIT VM access requires secure access, so deploying Azure Bastion would be the best option.
PA
Page
2 years ago
I disagree, I believe we should assign network security groups (NSGs) to the network interfaces of the session hosts.
LI
Lisandra
2 years ago
I think we should first deploy Azure Bastion to VNET1.