HOTSPOT

A company uses Azure Active Directory (Azure AD) with Azure role-based access control (RBAC) for access to resources.

Some users report that they are unable to grant RBAC roles to other users.

You need to troubleshoot the issue.

How should you complete the Azure Monitor query?

Hot Area:

A company enables just-in-time (JIT) virtual machine (VM) access in Azure.

An administrator observes a list of VMs on the Unsupported tab of the JIT VM access page in the Microsoft Defender for Cloud portal.

You need to determine why some VMs are not supported for JIT VM access.

What should you conclude?

A. The administrator is using the Microsoft Defender for Cloud free tier.

B. The VMs were provisioned by using a classic deployment.

C. The administrator does not have the SecurityReader role.

D. The administrator does not have permissions to request JIT access to the VMs.

A company uses an Azure Virtual Network (VNet) gateway named VNetGW1. VNetGW1 connects to a partner site by using a site-to-site VPN connection with dynamic routing.

The company observes that the VPN disconnects from time to time.

You need to troubleshoot the cause for the disconnections.

What should you verify?

A. The partner's VPN device and VNetGW1 are configured using the same shared key.

B. The IP address of the local network gateway matches the partner's VPN device.

C. The partner's VPN device is enabled for Perfect forward secrecy.

D. The partner's VPN device and VNetGW1 are configured with the same virtual network address space.

A company has an Azure Active Directory (Azure AD) tenant. The company deploys Azure AD Connect to synchronize objects from their Active Directory Domain Services (AD DS) domain.

You observe that AD DS objects are not synchronizing to Azure AD.

You need to verify that the staging mode is enabled.

What should you do?

A. Review the history for the Azure AD Connect sync scheduled task.

B. Run this PowerShell cmdlet: Get-ADSyncScheduler

C. Review the triggers for the Azure AD Connect sync scheduled task.

D. Run this PowerShell cmdlet: Get-ADSyncConnetorRunStatus

A company enables just-in-time (JIT) virtual machine (VM) access in Azure.

An administrator observes a list of VMs on the Unsupported tab of the JIT VM access page in the Microsoft Defender for Cloud portal.

You need to determine why some VMs are not supported for JIT VM access.

What should you conclude?

A. The administrator does not have the SecurityReader role.

B. The administrator is using the Microsoft Defender for Cloud free tier.

C. The client firewall does not allow port 22 on the VMs.

D. A network security group is not associated with the VMs.