Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Security Operations Analyst Associate · Microsoft
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Why it is not C - Azure Bastion - Provides secure RDP/SSH without public exposure, but does not implement JIT. Hence does not meet the requirement in the question
You use Azure Bastion to limit the protocol to RDP only. Bastion does not have JIT access capabilities but Defender for Cloud does. The question states that you already have a Defender for Cloud subscription.
I don't even know if there is a clear definition of Azure Policy. I'd choose A because user needs to require for access to the VMs, and that should be via PIM.