Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Azure Solutions Architect Expert · Microsoft
Step Sequence / Reordering Question
Add and arrange the steps in the correct execution order.
Hotspot Solution:
WRONG!!! AI: To manage the virtual machines on VNET1 and meet your requirements: 1) To provide access to virtual machines on VNET1, use: Azure Bastion Azure Bastion allows secure connections to your VMs via the Azure portal using RDP and SSH, without directly exposing your VMs to the internet. It uses TLS and can authenticate via Azure MFA. Why the other options aren't suitable: Just-in-time (JIT) VM access: While JIT reduces the attack surface by opening ports only when necessary, it doesn't directly manage RDP/SSH connections and MFA. Azure Web Application Firewall (WAF) in Azure Front Door: This is aimed at protecting web applications, not RDP/SSH management connections.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Also, the third option covers the first requirement - ncoming connections to the virtual machines must be authenticated by using Azure Multi-Factor Authentication (MFA) before network connectivity is allowed. MFA needs to be enforced before network connectivity.
Bastion and Azure Windows VM sign-in
But there's no mention that those VMs are windows and there's explicit mention of SSH which would suggest linux boxes as well. CA with assignment to Azure Management is broad but meets all the requirements unlike the other options