Microsoft AZ-140 Exam - Topic 4 Question 78 Discussion

Actual exam question for Microsoft's AZ-140 exam

Question #: 78
Topic #: 4

[All AZ-140 Questions]

You have an Azure Virtual Desktop deployment that contains the resources shown in the following table.

You need to enable just-in-time (JIT) VM access for all the session hosts.

What should you do first?

ADeploy Azure Bastion to VNET1.

BAssign network security groups (NSGs) to the network interfaces of the five session hosts.

CConfigure Access control (IAM) for HostPool1.

DAssign a network security group (NSG) to Subnet1.

Show Suggested Answer

Suggested Answer: B

In order to deploy a VPN gateway to VNet1, you should first add a subnet named GatewaySubnet to VNet1. According to the Microsoft Official Guide AZ-140, 'You must create a gateway subnet for the virtual network that you plan to use for the gateway. The subnet must be named GatewaySubnet and it must use an address range that is large enough to accommodate the number of IP addresses that you plan to use for the gateway and its supporting resources.' Therefore, the first step to ensure that you can deploy the VPN gateway is to add a subnet named GatewaySubnet to VNet1.

by Lai at Aug 27, 2024, 08:36 PM

Limited Time Offer

25%

Off

Get Premium AZ-140 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Carolann

5 months ago

Not sure if assigning NSGs to the interfaces is enough.

upvoted 0 times

...

Annmarie

5 months ago

Wait, can you even do JIT without NSGs?

upvoted 0 times

...

Louis

5 months ago

Definitely NSGs, that’s standard practice.

upvoted 0 times

...

France

5 months ago

I think deploying Azure Bastion is the way to go!

upvoted 0 times

...

Denise

6 months ago

You need to set up NSGs for the session hosts first.

upvoted 0 times

...

Yan

6 months ago

Assigning an NSG to Subnet1 seems like a good option, but I wonder if it’s the most effective way to enable JIT access for all session hosts.

upvoted 0 times

...

Irving

6 months ago

I’m a bit confused about whether we should configure IAM settings or focus on NSGs first. I feel like both are important for security.

upvoted 0 times

...

Whitley

6 months ago

I remember practicing a similar question where we had to set up security for VMs, and I think deploying Azure Bastion was part of it. Could that be the first step here?

upvoted 0 times

...

Erick

6 months ago

I think we might need to assign NSGs to the network interfaces first, but I'm not entirely sure if that’s the right approach for JIT access.

upvoted 0 times

...

Audry

6 months ago

I'm a bit confused on this one. The options seem to be talking about network security groups, access control, and subnets, but I'm not sure how those relate to enabling JIT VM access. I'll need to think this through carefully.

upvoted 0 times

...

Alesia

6 months ago

Alright, this seems straightforward. I think the answer is to deploy Azure Bastion to VNET1 to enable the JIT VM access. That's the first step we need to take, right?

upvoted 0 times

...

Cristen

6 months ago

Okay, let's see. We need to enable JIT VM access, so I'm guessing we need to do something related to network security or access control. I'm a bit unsure about the right approach here, but I'll carefully read through the options.

upvoted 0 times

...

Emogene

6 months ago

Hmm, this looks like it's testing our understanding of Azure Virtual Desktop security features. I think the key here is to enable just-in-time (JIT) VM access, so I'll need to carefully consider the options.

upvoted 0 times

...

Charlene

7 months ago

Okay, I think I've got it. The key here is to configure the access control (IAM) for HostPool1 to enable the JIT VM access. That seems like the most direct way to address the requirement.

upvoted 0 times

...

Marguerita

7 months ago

Ah, this is the kind of question I was hoping to see! I've reviewed the details of this incident, so I'm confident I can identify the key lesson learned.

upvoted 0 times

...

Latonia

7 months ago

I remember discussing AWS Shield in class, but it was mainly about DDoS protection, not really XSS issues, right?

upvoted 0 times

...

Sharen

11 months ago

This is a tough one, but I'm leaning towards Option A. Deploying Azure Bastion seems like it could be the quickest way to get that JIT access enabled. Plus, it's always fun to play with new Azure services, am I right?

upvoted 0 times

An

10 months ago

I agree. Let's go with Option A and deploy Azure Bastion to VNET1 for JIT VM access.

upvoted 0 times

...

Fannie

10 months ago

True, but I believe Azure Bastion is specifically designed for secure access to Azure VMs. It might be the best option in this case.

upvoted 0 times

...

Ria

10 months ago

But what about Option B? Assigning NSGs to the network interfaces could also help secure the session hosts.

upvoted 0 times

...

Miriam

10 months ago

I think Option A is a good choice. Azure Bastion can provide secure and seamless RDP and SSH access to your VMs.

upvoted 0 times

...

Kattie

11 months ago

Haha, I bet the exam writers are trying to trick us with these options. I'm going with Option C just to be different. Who needs network security when you've got access control, am I right?

upvoted 0 times

Yasuko

10 months ago

User3: I see your point, but I'm sticking with Option C. Access control for the win!

upvoted 0 times

...

Quentin

10 months ago

User2: I agree, security first! I'm going with Option B as well.

upvoted 0 times

...

Tiera

11 months ago

User1: I think I'll go with Option B. NSGs on the network interfaces seem like a good first step.

upvoted 0 times

...

Remedios

12 months ago

Hmm, I'm not sure about that. I think Option D might be the better choice here. Applying an NSG to the subnet could be more efficient than doing it individually for each host.

upvoted 0 times