Exam SC-100 topic 7 question 3 discussion

The security requirement this question wants us to meet is "The secure host must be provisioned from a custom operating system image." https://docs.microsoft.com/en-us/azure/virtual-desktop/set-up-golden-image

We need custom image so answer C is only correct. A yes, but this is in addition to Azure Virtual Desktop B no because custom image C yes D no, but needed for Jit

the requirement to provision the secure host from a custom operating system image can still be met with Azure Bastion. Here's how: Create a Custom Image: You can create a custom operating system image that includes all the necessary configurations and security settings for your secure host. Provision the VM: Use this custom image to provision a virtual machine in Azure. Deploy Azure Bastion: Set up Azure Bastion to provide secure RDP/SSH access to this VM.

I think it's C. Reason: AVD can use custom images, and can host secure PAWs.

"Administrators must connect to a "secure host" to perform any remote administration of the virtual machines. The "secure host" must be provisioned from a custom operating system image." It is the "Secure Host" that must be provisioned from a custom operating system = locked down with minimum services = Bastion Host

Not sure that is the question : "Administrators must connect to a secure host to perform any remote administration of the virtual machines. The secure host must be provisioned from a custom operating system image." Is normaly intended to use a PAW station not an VDA station to make administration. Solution is for Dev not admins, so Bastion can respond I think.

Answer: C this is Azure Virtual Desktop Administrators must connect to a secure host to perform any remote administration of the virtual machines. The secure host must be provisioned from a custom operating system image.

By all accounts Bastion is for secure connections to host (win and linux) for admin and more purposes. Virtual desktop is not a security solution, but a workforce solution saving money and hassle, so not correct for this purpose. And if a custom VM is needed as the host to connect to other VMs from, then why not set up Bastion to connect to that custom admin VM only.

Selected Answer: C "The secure host must be provisioned from a custom operating system image." https://www.youtube.com/watch?v=r-P-2lGzPFQ&list=PLQ2ktTy9rklhzzkSEZvDZT4QSIVUQZD-Y&index=9

To meet the security requirements for the virtual machines, including allowing administrators to connect to a secure host for remote administration, you should recommend: B. an Azure Bastion host. Here's how this recommendation aligns with the requirements: Azure Bastion is a secure and managed jump server that allows you to connect to your virtual machines directly through the Azure portal over SSH or RDP. This ensures secure remote administration of the virtual machines. The requirement for administrators to connect to a secure host for remote administration is met by using Azure Bastion.

In the exam 29.05.2023

C is the answer. https://learn.microsoft.com/en-us/azure/virtual-desktop/create-custom-image-templates Custom image templates in Azure Virtual Desktop enable you to easily create a custom image that you can use when deploying session host virtual machines (VMs). Using custom images helps you to standardize the configuration of your session host VMs for your organization. Custom image templates are built on Azure Image Builder and tailored for Azure Virtual Desktop.

I totally agree it's AVD because of the need for custom image.

custom image is the key - hence will go for AVD

Obviously C here. The requirements state that the "jump box" must be running a custom image. Bastion is a fully managed non-customisanle PaaS product. The only answer that supports the requirement for a custom image is AVD.

I totally agreed with you guys here. AVD

we talk about ALL VMs. others comments re customer image is related to secure host ONLY. Therefore, its not applicable