A VM deployed from an ARM template is listed as Unsupported on the Just-in-time (JIT) VM access blade in Azure Security Center. An administrator reports they cannot enable JIT for the VM. What should you do to allow JIT VM access to be enabled?

The correct answer is to create and configure a network security group (NSG). JIT VM access in Azure Security Center requires an NSG to control inbound traffic to the VM. Without an NSG, JIT cannot function as it relies on modifying NSG rules to open and close access ports. Creating an additional public IP address is unnecessary; JIT works with existing public IPs. Replacing a Basic Load Balancer with a Standard Load Balancer is irrelevant to JIT's core requirement for NSGs. Assigning an Azure Active Directory Premium Plan 1 license to Admin1 is also unrelated to the technical prerequisites for enabling JIT VM access on a virtual machine.