You are the Azure security operations engineer for your organization. There are over 20 virtual machines (VMs) running in the Azure West Europe region. 
There is a single virtual network (VNET) configured with three subnets. Each subnet has a Network Security Group (NSG) assigned. 
You need to configure Just-in-Time (JIT) access for all 20 VMs. 
Which five actions should you perform in sequence? To answer, move the appropriate actions from the list of possible actions to the answer area and arrange them in the correct order. 
Create a list in the correct order. 
A.Select Block all other access on VMs. 
B.Enter the port numbers 22 SSH and 3389 RDP. 
C.Select Just-in-Time VM Acess 
D.Select each VM. 
E. Select the Not configured tab. 
F. Open the Security Center dashboard. 
G.Select Enable JIT on VMs.

Answer options:

A.C -> D -> F -> G -> A
B.A -> F -> G -> C -> E
C.F -> C -> E -> D -> G
D.F -> E -> C -> G -> D

Correct Answer: C 
You should perform the following actions in order: 
1. Open the Security Center dashboard. 
2. Select Just-in-Time VM Access. 
3. Select the Not Configured tab. 
4. Select each VM. 
5. Select Enable JIT on VMs. 
You should first open the Security Center Dashboard. This dashboard allows you to quickly view your current security posture and score and gives you deep analysis of your tenant from a security perspective. When you open Security Center, it shows you different tiles including Policy & Compliance, 
Resource security hygiene, and threat protection, giving you recommendations to help improve your security score. 
You should then Select Just-in-Time VM Access. You are given three tabs showing Configured, Not Configured, and Not Recommended VMs. You should select the Not Configured tab. This tab lists all VMs that do not yet have JIT access enabled on them. 
Then you should select each VM and enable JIT by clicking on the Enable JIT on VMs button. 
You should not enter the port numbers 22 SSH and 3389 RDP. Although both ports are blocked by enabling JIT, you do not need to explicitly enter them. They are blocked by default. 
You should not click on Block all other access on VMs. When JIT is enabled, access is blocked to the specified ports only. 
Reference: 

https://docs.microsoft.com/en-us/azure/security-center/defender-for-servers-introduction