Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft SC-100 Exam - Topic 1 Question 78 Discussion

You need to design a solution to provide administrators with secure remote access to the virtual machines. The solution must meet the following requirements:* Prevent the need to enable ports 3389 and 22 from the internet.* Only provide permission to connect the virtual machines when required.* Ensure that administrators use the Azure portal to connect to the virtual machines.Which two actions should you include in the solution? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
D) Enable just-in-time (JIT) VM access. and E) Configure Azure Bastion.
A) Enable Azure Active Directory (Azure AD) Privileged Identity Management (PIM) roles as virtual machine contributors.
B) Configure Azure VPN Gateway.
C) Enable Just Enough Administration (JEA).

Microsoft SC-100 Exam - Topic 1 Question 78 Discussion

Actual exam question for Microsoft's SC-100 exam
Question #: 78
Topic #: 1
[All SC-100 Questions]

You need to design a solution to provide administrators with secure remote access to the virtual machines. The solution must meet the following requirements:

* Prevent the need to enable ports 3389 and 22 from the internet.

* Only provide permission to connect the virtual machines when required.

* Ensure that administrators use the Azure portal to connect to the virtual machines.

Which two actions should you include in the solution? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer: D, E

https://docs.microsoft.com/en-us/powershell/scripting/learn/remoting/jea/overview?view=powershell-7.2 https://docs.microsoft.com/en-us/azure/defender-for-cloud/just-in-time-access-usage https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles


by Susy at Apr 07, 2026, 02:43 AM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Iluminada
4 days ago
VPN Gateway might be overkill here.
upvoted 0 times
...
Katie
9 days ago
PIM roles could help with permissions.
upvoted 0 times
...
Cecilia
14 days ago
JIT VM access sounds good too.
upvoted 0 times
...
Glory
20 days ago
I think Azure Bastion is key.
upvoted 0 times
...
Coral
25 days ago
This question is tricky.
upvoted 0 times
...
Daren
30 days ago
I feel confident with Bastion and JIT.
upvoted 0 times
...
Ettie
1 month ago
PIM roles could help too, but not essential.
upvoted 0 times
...
Domingo
1 month ago
Just-in-time access is also smart.
upvoted 0 times
...
Laquita
2 months ago
Agreed, it keeps ports closed.
upvoted 0 times
...
Bette
2 months ago
I think Azure Bastion is a must.
upvoted 0 times
...
Major
2 months ago
This question is tricky.
upvoted 0 times
...
Ma
2 months ago
Not sure about PIM roles being necessary for this scenario.
upvoted 0 times
...
Elden
2 months ago
Azure VPN Gateway seems like a good fit too.
upvoted 0 times
...
Regenia
2 months ago
Wait, can we really avoid opening those ports with just these options?
upvoted 0 times
...
Val
4 months ago
Definitely agree, JIT VM access is a must for security!
upvoted 0 times
...
Selma
4 months ago
I think Azure Bastion is a solid choice here.
upvoted 0 times
...
Crista
5 months ago
I think Azure AD Privileged Identity Management (PIM) roles might be relevant, but I’m not clear on how they fit with the secure access part of the question.
upvoted 0 times
...
Celestina
5 months ago
I feel like we went over Azure VPN Gateway in class, but I'm not confident if it directly relates to the requirements of using the Azure portal for access.
upvoted 0 times
...
Alton
5 months ago
I'm not entirely sure, but I think enabling Just-in-Time (JIT) VM access could help limit exposure and only allow connections when needed.
upvoted 0 times
...
Joesph
5 months ago
I remember studying about Azure Bastion and how it allows secure RDP and SSH access without exposing ports directly to the internet.
upvoted 0 times
...

Save Cancel