SC-100 · Question #60
Your company has an office in Seattle. The company has two Azure virtual machine scale sets hosted on different virtual networks. The company plans to contract developers in India. You need to…
The correct answer is A. Deploy Azure Bastion to one virtual network. D. Create a hub and spoke network by using virtual network peering. Azure Bastion provides browser-based RDP/SSH over HTTPS (SSL) directly from the Azure portal without requiring public IP addresses on VMs or a VPN client-satisfying all three connectivity requirements. Deploying Bastion to only one virtual network (A) and then connecting the…
Question
Your company has an office in Seattle. The company has two Azure virtual machine scale sets hosted on different virtual networks. The company plans to contract developers in India. You need to recommend a solution provide the developers with the ability to connect to the virtual machines over SSL from the Azure portal. The solution must meet the following requirements:
- Prevent exposing the public IP addresses of the virtual machines.
- Provide the ability to connect without using a VPN.
- Minimize costs.
Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Options
- ADeploy Azure Bastion to one virtual network.
- BDeploy Azure Bastion to each virtual network.
- CEnable just-in-time VM access on the virtual machines.
- DCreate a hub and spoke network by using virtual network peering.
- ECreate NAT rules and network rules in Azure Firewall.
How the community answered
(37 responses)- A84% (31)
- B3% (1)
- C11% (4)
- E3% (1)
Explanation
Azure Bastion provides browser-based RDP/SSH over HTTPS (SSL) directly from the Azure portal without requiring public IP addresses on VMs or a VPN client-satisfying all three connectivity requirements. Deploying Bastion to only one virtual network (A) and then connecting the two VNets in a hub-and-spoke topology via VNet peering (D) allows a single Bastion instance to reach VMs on both VNets, minimizing cost versus deploying Bastion to each VNet separately (B). Just-in-time VM access (C) reduces exposure windows for management ports but still requires public IPs or existing connectivity paths. NAT rules in Azure Firewall (E) would expose public IPs and add unnecessary cost and complexity, contradicting the requirements.
Topics
Community Discussion
No community discussion yet for this question.