When reviewing Just-in-Time VM access you noticed that some VMs are appearing under “Not Applicable”. What are the reasons that must be present in order for a VM to be considered not applicable? (select all that apply)

Answer options:

A.The VM is not assigned to a network security group
B.The VM is not protected by a Firewall
C.The VM has JIT already enabled
D.VM has been deployed through ARM (Azure Resource Manager)

Correct Answers: A and B
Option A & B is correct.
JIT is not supported on VMs where: It is missing network security group (NSG) or Azure Firewall
Deployed as classic VM - JIT only supports VMs deployed through ARM, not `classic deployment`. Hence, Option D is incorrect.
Other - Your VM might be in this tab if the JIT solution is disabled in the security policy of the subscription or the resource group.
Option C is incorrect. JIT is already enabled.
Reference: 

https://docs.microsoft.com/en-us/azure/security-center/just-in-time-explained