Exam AZ-104 All Questions

View all questions & answers for the AZ-104 exam

Exam AZ-104 topic 5 question 144 discussion

Actual exam question from Microsoft's AZ-104

Question #: 144
Topic #: 5

You have an Azure subscription that contains the virtual networks shown in the following table.

The subscription contains the virtual machines shown in the following table.

All the virtual machines have only private IP addresses.

You deploy an Azure Bastion host named Bastion1 to VNet1.

To which virtual machines can you connect through Bastion1?

A. VM1 only
B. VM1 and VM2 only
C. VM1 and VM3 only
D. VM1, VM2, and VM3

Show Suggested Answer

Suggested Answer: B 🗳️

by gcertq at Sept. 2, 2023, 10:07 p.m.

Comments

Submit Cancel

gcertq

Highly Voted 1 year, 10 months ago

VM1 and VM2, because they are peered.

upvoted 20 times

...

Basim1291

Highly Voted 1 year, 10 months ago

Selected Answer: B

B is correct because of peering

upvoted 7 times

...

vrm1358

Most Recent 4 months ago

Selected Answer: D

Answer is D. Bastion can use peering to connect to VM's in other regions as well.

upvoted 2 times

...

Nathan12345

4 months, 3 weeks ago

Selected Answer: B

Az Bistion doesn't support traversing those connections.

upvoted 1 times

...

PMPft17

8 months, 4 weeks ago

B is correct, I had to research this. Vnet1 <---> Vnet2 ----> Vnet3. Because Vnet1 and Vnet2 are peered they can communicate using the Bastion host. Vnet 3 cannot because its not peered to Vnet 1. Azure Bastion does support Global and Regional peering so if Vnet 3 was globally peered to Vnet 1 than the answer would be all 3 VMs however, due to regional peering only, answer B is the correct choice.

upvoted 4 times

...

Dankho

9 months ago

Selected Answer: B

VM1 and VM2 because they are peered

upvoted 1 times

...

amdxp

11 months ago

Selected Answer: D

Global virtual network peering: Connecting virtual networks across Azure regions

upvoted 3 times

...

Honey918

11 months, 1 week ago

Selected Answer: B

vnet1 and vnet2 are peered

upvoted 2 times

...

090200f

1 year, 1 month ago

answer B, Vm1 and Vm2 only bcoz vnet1 and vnet2 are peered

upvoted 2 times

...

Mahdib

1 year, 2 months ago

B. Bastian doesn't support transitive peering https://stackoverflow.com/questions/69749668/is-azure-bastion-able-to-connect-via-transitive-peering

upvoted 2 times

...

Amir1909

1 year, 3 months ago

B is correct

upvoted 1 times

...

01111010

1 year, 8 months ago

Selected Answer: B

Correct answer is B (VM1 and VM2) because Bastion is deployed to VNEt1, which is peered with VNet2. D would be correct answer if Bastion was deployed in VNet2, which is not the case.

upvoted 6 times

...

peterwheat

1 year, 8 months ago

Selected Answer: B

VNet1 and VNet are peered and VNet2 and VNet3 are also peered. However VNet1 and VNet3 are not peered with each other. If gateway transit is not allowed - and it is not stated -, then there is no connection between VNet1 and VNet3. Bastion is deployed in VNet1.

upvoted 6 times

...

Tobi0815MU

1 year, 8 months ago

VM1,VM2 as Bastion does not support chained peered configuration, only HUB-Spoke ones https://learn.microsoft.com/en-us/azure/bastion/vnet-peering

upvoted 3 times

...

Vestibal

1 year, 9 months ago

Selected Answer: D

Azure Bastion and VNet peering can be used together. When VNet peering is configured, you don't have to deploy Azure Bastion in each peered VNet. This means if you have an Azure Bastion host configured in one virtual network (VNet), it can be used to connect to VMs deployed in a peered VNet without deploying an additional bastion host. For more information about VNet peering, see About virtual network peering. https://learn.microsoft.com/en-us/azure/bastion/vnet-peering

upvoted 2 times

01111010

1 year, 8 months ago

Hmm, using your quote and provided link... it can be use to connect to VMs deployed "IN PEERED VNet"....so, logically non-peered VNets = no Bastion access from VNet1, thus excluding VNet3 (and VM3). Correct answer is B (VM1 & VM2).

upvoted 1 times

...