A stem for the lock-lab estate tempts the engineer to “enable just-in-time VM access on each virtual machine” as the Domain 4 Defender for Servers answer. What is the correct Domain 4 focus instead?
Select an answer to reveal the explanation.
Short Explanation
JIT is how you borrow the lock door key for an hour—that’s Domain 3. Domain 4 is picking and configuring the Servers plan itself. Don’t confuse the unlock procedure with the plan toggle.
Full Explanation
In Domain 4, Microsoft Defender for Servers work is plan configuration: selecting Plan 1 versus Plan 2 and related integrations. Just-in-time VM access request and approval workflows belong to Domain 3 remote access, even though JIT may require Defender for Servers as a prerequisite feature. Bastion SKU selection and disabling Servers to “make JIT work” are incorrect Domain 4 answers.