Exam AZ-500 topic 6 question 26 discussion

Actual exam question from Microsoft's AZ-500

Question #: 26
Topic #: 6

HOTSPOT
-

You have an Azure subscription that contains the virtual networks shown in the following table.

The subscription contains the virtual machines shown in the following table.

All the virtual machines have only private IP addresses.

You deploy Azure Bastion to VNet1 as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by ITFranz at April 28, 2024, 3:14 p.m.

Comments

Submit Cancel

ITFranz

Highly Voted 1 year, 1 month ago

To support the answers. https://learn.microsoft.com/en-us/azure/bastion/bastion-overview The chart contains answer 1(Y) and 2 (Y) Answer three should be (Y) According to the Achitecture. The Bastion host is deployed in the virtual network that contains the AzureBastionSubnet subnet that has a minimum /26 prefix. The user connects to the Azure portal using any HTML5 browser. The user selects the virtual machine to connect to. With a single click, the RDP/SSH session opens in the browser. No public IP is required on the Azure VM. Answer = YYY

upvoted 7 times

pino1

1 year ago

1. No - basic SKU does not support RDP Connection client. 2. Yes 3. No

upvoted 1 times

jorgesoma

11 months, 4 weeks ago

Basic SKU support RDP Windows Client. See reference: https://learn.microsoft.com/es-es/azure/bastion/configuration-settings

upvoted 3 times

...

Ready2Rock

Highly Voted 1 year, 1 month ago

Ans is correct, the VM3 can't be connected as it has no direct peering with Vnet 1 where the bastion is hosted.

upvoted 6 times

jorgesoma

11 months, 4 weeks ago

Agree. No peering vnet 1 - vnet 3

upvoted 1 times

...

moadabdou

Most Recent 3 months, 2 weeks ago

"You can connect to VM1 via Bastion using the Remote Desktop Connection client." 1-YES Explanation: VM1 is connected to VNet1, where Azure Bastion is deployed. The Basic SKU of Azure Bastion allows RDP connections to virtual machines located within the same virtual network. "You can connect to VM2 via Bastion using SSH." 2-NO Explanation: Although VNet1 and VNet2 are peered and located in the same region, the Basic SKU of Azure Bastion does not support connections to virtual machines in peered virtual networks. This functionality is available only with the Standard SKU or higher. "You can connect to VM3 via Bastion using the Azure portal." 3-NO Explanation: VM3 is connected to VNet3, which is in a different region (West US). Additionally, the Basic SKU of Azure Bastion does not support connections to virtual machines in peered virtual networks, regardless of the region.

upvoted 1 times

randy0077

3 months ago

dont provide wrong ans if you dont have link to support your ans. I wont help anyone. 2 should be yes: https://learn.microsoft.com/en-us/azure/bastion/bastion-overview

upvoted 2 times

randy0077

2 months, 3 weeks ago

YNN is correct ans: https://learn.microsoft.com/en-us/azure/bastion/bastion-overview#:~:text=Connect%20to%20Windows%20VM%20using%20SSH,No

upvoted 1 times

...

[Removed]

10 months, 3 weeks ago

Y Y N 1. Yes, no issue 2. Yes, no issue, peered https://learn.microsoft.com/en-us/azure/bastion/bastion-overview 3. For 3rd question; assuming no additional routing configured (since not mentioned in the question) - it is No, because no direct peering between VNet1 and VNet3 Reference for 3rd:- a. Someone already tested in lab > https://stackoverflow.com/questions/69749668/is-azure-bastion-able-to-connect-via-transitive-peering b. End-to-end connection needs to be configured as explained in this > https://learn.microsoft.com/en-us/answers/questions/1660441/can-bastion-work-for-peers-peer-by-default

upvoted 2 times

...