A company enables just-in-time (JIT) virtual machine (VM) access in Azure.
An administrator observes a list of VMs on the Unsupported tab of the JIT VM access page in the Microsoft Defender for Cloud portal.
You need to determine why some VMs are not supported for JIT VM access. What should you conclude?

1. A. The administrator does not have the SecurityReader role.
2. B. The administrator is using the Microsoft Defender for Cloud free tier.
3. C. The client firewall does not allow port 22 on the VMs.
4. D. A network security group is not associated with the VMs.

Correct Answer: C

A company has an Azure Virtual Network gateway named VNetGW1. The company enables point-to-site connectivity on VNetGW1. An administrator configures VNetGW1 for the following:
OpenVPN for the tunnel type.
Azure certificate for the authentication type.
Users receive a certificate mismatch error when connecting by using a VPN client. You need to resolve the certificate mismatch error.
What should you do?

1. A. Reissue the client certificate with client authentication enabled.
2. B. Create a profile manually, add the server FQDN and reissue the client certificate.
3. C. Reissue the client certificate with server authentication enabled.
4. D. Install an IKEv2 VPN client on the user's computers.

Correct Answer: B

A company implements Azure Firewall and deploys an Azure Firewall policy.
The policy incudes multiple application and network rules for the company's infrastructure. After deployment, an application is not accessible from on-premises computers.
You need to enable diagnostic logging for the following settings:
AzureFirewallApplicationRule
AzureFirewallNetworkRule
AzureFirewallDnsProxy
How should you complete the PowerShell cmdlet?

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

A company implements self-service password reset (SSPR).
After a firewall upgrade at the company's datacenter, SSPR stops working. You need to resolve the issue.
Which two URLs must be present on the firewalls to allow SSPR to connect?

1. A. *.update.microsoft.com
2. B. *.servicebus.windows.net
3. C. *.passwordreset.onmicrosoft.com
4. D. *.svc.ms
5. E. *.adl.windows.com

Correct Answer: AE

A company deploys an Azure Firewall. The company reports the following log entry:

For each of the following questions, select Yes or No.

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A