ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-500 All Questions

View all questions & answers for the AZ-500 exam
Go to Exam

Exam AZ-500 topic 3 question 61 discussion

Actual exam question from Microsoft's AZ-500
Question #: 61
Topic #: 3
[All AZ-500 Questions]

DRAG DROP -
You have an Azure subscription that contains the following resources:
A virtual network named VNET1 that contains two subnets named Subnet1 and Subnet2.

✑ A virtual machine named VM1 that has only a private IP address and connects to Subnet1.
You need to ensure that Remote Desktop connections can be established to VM1 from the internet.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange then in the correct order.
Select and Place:

Show Suggested Answer Hide Answer
Suggested Answer:
by Lozo2020 at April 25, 2022, 3:36 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Johnvic
Highly Voted 2 years, 1 month ago
Exam.6 case studies. 3 true/false questions. 47 multiple questions and no simulations. Alot of new questions thats not up here
upvoted 13 times
liorh
2 years ago
where can i find case studies?! i did not see it here in exam topics for az500...
upvoted 1 times
...
obaali1990
2 years, 1 month ago
Did you pass? What was your experience at the exams center?
upvoted 1 times
...
...
foobar1985
Highly Voted 1 year, 8 months ago
in the exam on 11/9/2023
upvoted 7 times
...
shanrajesh
Most Recent 4 months, 1 week ago
Why we need to create an new subnet, Subnet2 is not associated to any resource. Subnet1 is associtated with Vm1, anyone clarifiy on this
upvoted 1 times
hellboysecret
2 months, 3 weeks ago
We need to create a subnet for firewall.
upvoted 1 times
...
Hot_156
3 months ago
1. Deploy Azure Firewall. Subnet2 2. Create a NAT rule collection. 3. Configure a network security group (NSG).
upvoted 1 times
Hot_156
2 months, 3 weeks ago
I was wrong. There must be a new subnet called "AzureFirewallSubnet" 1. Create a new subnet 2. Deploye the FW 3. Create a NAT rule collection
upvoted 1 times
...
...
...
cerifyme85
7 months, 2 weeks ago
what about subnet 2.. we can use that as firewall
upvoted 1 times
...
91743b3
10 months ago
On exam Aug 6 2024
upvoted 4 times
...
JunetGoyal
1 year, 7 months ago
Given ans is correct You need separate Firewall subnet to deploy FW> then create Firewall> then Do NAT rule AS VM does not have public IP, you either need Dnat or/ you can use Bastion service too /or Configure another VM from Same subnet and do RDP from new VM to this one.
upvoted 5 times
...
heatfan900
1 year, 9 months ago
giving the VM a public IP and configuring a rule on the NSG would be a lot easier but if that is not there then this is the alternative
upvoted 4 times
...
Ario
1 year, 11 months ago
this question doesn't make any sense regardless creating a new subnet is useless , Configure an Azure public IP address: Create a new Azure public IP address resource. Associate the public IP address with the virtual machine (VM1). Create an Azure network security group (NSG) rule: Create an inbound rule in the NSG associated with the network interface of VM1. Allow incoming traffic on the Remote Desktop Protocol (RDP) port (TCP port 3389) from any source IP address (0.0.0.0/0) or a specific IP address range if necessary. Configure the network security group (NSG) on Subnet1: Associate the NSG created in step 2 with Subnet1 of VNET1. Ensure that the NSG allows outgoing traffic from Subnet1 to the internet.
upvoted 2 times
flafernan
1 year, 6 months ago
totally agree
upvoted 1 times
...
Mnguyen0503
1 year, 5 months ago
Incorrect. Creating new subnet is required for Azure Firewall. Since the question already said the VM does not have a public IP, an Azure Firewall is required to enforce NAT rule and allow RDP traffic in. Having a public IP on a VM is not ideal if you want to scale.
upvoted 1 times
...
...
zellck
2 years, 1 month ago
1. Create a new subnet 2. Deploy Azure Firewall 3. Create a NAT rule collection https://learn.microsoft.com/en-us/azure/firewall/tutorial-firewall-deploy-portal-policy - The size of the AzureFirewallSubnet subnet is /26. - The firewall will be in this subnet, and the subnet name must be AzureFirewallSubnet. Deploy the firewall and policy https://learn.microsoft.com/en-us/azure/firewall/tutorial-firewall-deploy-portal-policy#deploy-the-firewall-and-policy Configure a DNAT rule https://learn.microsoft.com/en-us/azure/firewall/tutorial-firewall-deploy-portal-policy#configure-a-dnat-rule
upvoted 6 times
...
majstor86
2 years, 3 months ago
1. Create a new subnet. 2. Deploy Azure Firewall. 3. Create a NAT rule collection.
upvoted 2 times
...
ligu
2 years, 3 months ago
Answers are correct
upvoted 1 times
...
F117A_Stealth
2 years, 6 months ago
Answer is correct. You can configure Azure Firewall Destination Network Address Translation (DNAT) to translate and filter inbound Internet traffic to your subnets.
upvoted 3 times
AzureJobsTillRetire
2 years, 4 months ago
That's correct. VM1 has only a private IP address. For the NSG to work, VM1 needs to have a public IP address.
upvoted 1 times
...
...
somenick
2 years, 8 months ago
Correct. https://learn.microsoft.com/en-us/azure/firewall/tutorial-firewall-dnat
upvoted 1 times
...
geuser
2 years, 8 months ago
question and answer does not make sense. The Q looks incomplete.
upvoted 4 times
...
Lozo2020
3 years, 1 month ago
Correct
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel