Microsoft SC-100 Exam - Topic 1 Question 78 Discussion

Actual exam question for Microsoft's SC-100 exam

Question #: 78
Topic #: 1

You need to design a solution to provide administrators with secure remote access to the virtual machines. The solution must meet the following requirements:

* Prevent the need to enable ports 3389 and 22 from the internet.

* Only provide permission to connect the virtual machines when required.

* Ensure that administrators use the Azure portal to connect to the virtual machines.

Which two actions should you include in the solution? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

AEnable Azure Active Directory (Azure AD) Privileged Identity Management (PIM) roles as virtual machine contributors.

BConfigure Azure VPN Gateway.

CEnable Just Enough Administration (JEA).

DEnable just-in-time (JIT) VM access.

EConfigure Azure Bastion.

Show Suggested Answer

Suggested Answer: D, E

https://docs.microsoft.com/en-us/powershell/scripting/learn/remoting/jea/overview?view=powershell-7.2 https://docs.microsoft.com/en-us/azure/defender-for-cloud/just-in-time-access-usage https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

by Susy at Apr 07, 2026, 02:43 AM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Crista

4 hours ago

I think Azure AD Privileged Identity Management (PIM) roles might be relevant, but I’m not clear on how they fit with the secure access part of the question.

upvoted 0 times

...

Celestina

5 days ago

I feel like we went over Azure VPN Gateway in class, but I'm not confident if it directly relates to the requirements of using the Azure portal for access.

upvoted 0 times

...

Alton

10 days ago

I'm not entirely sure, but I think enabling Just-in-Time (JIT) VM access could help limit exposure and only allow connections when needed.

upvoted 0 times

...

Joesph

16 days ago

I remember studying about Azure Bastion and how it allows secure RDP and SSH access without exposing ports directly to the internet.

upvoted 0 times

...