Q: 15
HOTSPOT Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the domain controllers shown in the following table.
You need to configure DC3 to be the authoritative time server for the domain. Which operations master role should you transfer to DC3, and which console should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. 
Your Answer
Discussion
Makes sense to pick B here. JIT in Defender for Cloud is meant for access requests like this, NSG on its own can't handle the approval part. Pretty sure that's what they're going for, but let me know if you think otherwise.
Pretty sure it's B. Defender for Cloud gives the JIT access feature where admins submit a request and get temporary RDP access. Not something NSG alone can handle. Agree?
Not D, that just blocks traffic, pretty sure it's B since Defender for Cloud has JIT access.
Its B. JIT access with Defender for Cloud is made exactly for this kind of scenario.
Be respectful. No spam.