nerdexam
MicrosoftMicrosoft

SC-100 · Question #236

SC-100 Question #236: Real Exam Question with Answer & Explanation

Sign in or unlock SC-100 to reveal the answer and full explanation for question #236. The question stem and answer options stay visible for context.

Design security solutions for infrastructure

Question

You have an Azure subscription that contains multiple network security groups (NSGs), multiple virtual machines, and an Azure Bastion host named bastion1. Several NSGs contain rules that allow direct RDP access to the virtual machines by bypassing bastion1. You need to ensure that the virtual machines can be accessed only by using bastion1. The solution must prevent the use of NSG rules to bypass bastion1. What should you include in the solution?

Options

  • AAzure Virtual Network Manager security admin rules
  • BAzure Virtual Network Manager connectivity configurations
  • CAzure Firewall application rules
  • DAzure Firewall network rules

Unlock SC-100 to see the answer

You've previewed enough free SC-100 questions. Unlock SC-100 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Azure Virtual Network Manager#Network Security Groups#Azure Bastion#Network Policy Enforcement
Full SC-100 PracticeBrowse All SC-100 Questions