Exam AZ-200 topic 3 question 11 discussion

Actual exam question from Microsoft's AZ-200

Question #: 11
Topic #: 3

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
You have the following resource groups:

Developers must connect to DevServer only through DevWorkstation. To maintain security, DevServer must not accept connections from the internet.
You need to create a private connection between the DevWorkstation and DevServer.
Solution: Configure a public IP address on DevServer_WestCentral. Configure the Network Security Group to allow all incoming ports.
Does the solution meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️
DevServer must not accept connections from the internet.
Instead use Global Virtual Network peering.
Azure Global Virtual Network peering allows you to peer virtual networks in different Azure regions to build a global private network in Azure.
References:
https://azure.microsoft.com/en-us/updates/global-vnet-peering/

by marcohichan at Aug. 13, 2020, 7:17 a.m.

Comments

Submit Cancel

SunnyAU

4 years, 10 months ago

Answer B. This solution will not fit the requirement. As per the requirement, the DevServer must not be able to accept connections from the Internet whereas this solution provides internet access + enables all ports to be accessible via Internet.

upvoted 1 times

...

marcohichan

4 years, 10 months ago

the given answer is correct. as DevServer must not accept connections from the internet.

upvoted 1 times

...