Enable Remote Desktop for Azure Virtual Machines | Exam AZ-500

Connect to a Virtual Machine using Remote Desktop

Question

You have an Azure subscription that contains virtual machines.

You enable just in time (JIT) VM access to all the virtual machines.

You need to connect to a virtual machine by using Remote Desktop.

What should you do first?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

C

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/connect-logon

The correct answer is C. From the Azure portal, select the virtual machine, select Connect, and then select Request access.

Just in time (JIT) VM access is a feature in Azure Security Center that helps you to reduce the surface area of attack on virtual machines. JIT access allows administrators to request and configure a secure, time-limited access to virtual machines. With JIT enabled, you can't connect to a virtual machine via Remote Desktop Protocol (RDP) without requesting access first.

To connect to a virtual machine using Remote Desktop, you need to follow these steps:

  1. Open the Azure portal and go to the virtual machine that you want to connect to.
  2. Select the virtual machine and then select the Connect button.
  3. In the Connect pane, select the RDP option.
  4. In the RDP pane, select the time-limited access option and then select the duration of access that you need.
  5. Select the Connect button.
  6. Wait for the JIT access policy to be applied and verified.
  7. Download the RDP file.
  8. Open the RDP file and provide the credentials for the virtual machine.

Option A is incorrect because activating the Security administrator user role in Azure AD PIM doesn't provide access to the virtual machine. The Security administrator user role is used to manage Azure AD resources.

Option B is incorrect because activating the Owner role for the virtual machine in Azure AD PIM doesn't provide access to the virtual machine. The Owner role is used to manage the virtual machine, but it doesn't grant access to the virtual machine.

Option D is incorrect because adding the Network Watcher Agent virtual machine extension doesn't provide access to the virtual machine. The Network Watcher Agent extension is used to monitor network traffic on the virtual machine.