SC-100 · Question #231
You have an Azure subscription that contains 100 virtual machines, a virtual network named VNet1, and 20 users. The virtual machines run Windows Server and are connected to VNet1. The users work…
The correct answer is C. Azure Bastion. Azure Bastion is a fully managed service that provides more secure and seamless Remote Desktop Protocol (RDP) and Secure Shell Protocol (SSH) access to virtual machines (VMs) without any exposure through public IP addresses. Azure Bastion supports Kerberos Entra authentication…
Question
You have an Azure subscription that contains 100 virtual machines, a virtual network named VNet1, and 20 users. The virtual machines run Windows Server and are connected to VNet1. The users work remotely and access Azure resources from Linux workstations. You need to ensure that the users can connect to the virtual machines from the workstations by using Secure Shell (SSH). The solution must meet the following requirements:
- Ensure that the users authenticate by using their Microsoft Entra
credentials.
- Prevent the users from transferring files from the virtual machines
by using SSH.
- Prevent the users from directly accessing the virtual machines by
using the public IP address of the virtual machines. What should you include in the solution?
Options
- AAzure NAT Gateway
- Bjust-in-time (JIT) VM access
- CAzure Bastion
- DPoint-to-Site (P2S) VPN
How the community answered
(29 responses)- A7% (2)
- B14% (4)
- C76% (22)
- D3% (1)
Explanation
Azure Bastion is a fully managed service that provides more secure and seamless Remote Desktop Protocol (RDP) and Secure Shell Protocol (SSH) access to virtual machines (VMs) without any exposure through public IP addresses. Azure Bastion supports Kerberos Entra authentication. https://learn.microsoft.com/en-us/azure/bastion/bastion-overview
Topics
Community Discussion
No community discussion yet for this question.