Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft SC-100 Exam - Topic 1 Question 78 Discussion

You need to design a solution to provide administrators with secure remote access to the virtual machines. The solution must meet the following requirements:* Prevent the need to enable ports 3389 and 22 from the internet.* Only provide permission to connect the virtual machines when required.* Ensure that administrators use the Azure portal to connect to the virtual machines.Which two actions should you include in the solution? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
D) Enable just-in-time (JIT) VM access. and E) Configure Azure Bastion.
A) Enable Azure Active Directory (Azure AD) Privileged Identity Management (PIM) roles as virtual machine contributors.
B) Configure Azure VPN Gateway.
C) Enable Just Enough Administration (JEA).

Microsoft SC-100 Exam - Topic 1 Question 78 Discussion

Actual exam question for Microsoft's SC-100 exam
Question #: 78
Topic #: 1
[All SC-100 Questions]

You need to design a solution to provide administrators with secure remote access to the virtual machines. The solution must meet the following requirements:

* Prevent the need to enable ports 3389 and 22 from the internet.

* Only provide permission to connect the virtual machines when required.

* Ensure that administrators use the Azure portal to connect to the virtual machines.

Which two actions should you include in the solution? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer: D, E

https://docs.microsoft.com/en-us/powershell/scripting/learn/remoting/jea/overview?view=powershell-7.2 https://docs.microsoft.com/en-us/azure/defender-for-cloud/just-in-time-access-usage https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles


by Susy at Apr 07, 2026, 02:43 AM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Bette
4 days ago
I think Azure Bastion is a must.
upvoted 0 times
...
Major
9 days ago
This question is tricky.
upvoted 0 times
...
Ma
15 days ago
Not sure about PIM roles being necessary for this scenario.
upvoted 0 times
...
Elden
20 days ago
Azure VPN Gateway seems like a good fit too.
upvoted 0 times
...
Regenia
25 days ago
Wait, can we really avoid opening those ports with just these options?
upvoted 0 times
...
Val
2 months ago
Definitely agree, JIT VM access is a must for security!
upvoted 0 times
...
Selma
3 months ago
I think Azure Bastion is a solid choice here.
upvoted 0 times
...
Crista
3 months ago
I think Azure AD Privileged Identity Management (PIM) roles might be relevant, but I’m not clear on how they fit with the secure access part of the question.
upvoted 0 times
...
Celestina
3 months ago
I feel like we went over Azure VPN Gateway in class, but I'm not confident if it directly relates to the requirements of using the Azure portal for access.
upvoted 0 times
...
Alton
3 months ago
I'm not entirely sure, but I think enabling Just-in-Time (JIT) VM access could help limit exposure and only allow connections when needed.
upvoted 0 times
...
Joesph
4 months ago
I remember studying about Azure Bastion and how it allows secure RDP and SSH access without exposing ports directly to the internet.
upvoted 0 times
...

Save Cancel