Examkin

Question

Difficulty: MediumConfigure Azure Bastion

Your company is setting up a secure hybrid cloud environment in Azure. You have deployed a virtual network named `Prod-VNet-01` in the East US 2 region. The virtual network contains multiple virtual machines that host a line-of-business application.

You need to deploy Azure Bastion to enable secure administrative access to the virtual machines. You must ensure that the subnet used by Azure Bastion is secured with a Network Security Group (NSG) before the Bastion host starts receiving traffic.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  1. 1Create a subnet named `AzureBastionSubnet` in `Prod-VNet-01` with an address prefix of /26/26.
  2. 2Create a Network Security Group (NSG) configured with the mandatory rules for Azure Bastion, and associate it with the `AzureBastionSubnet`.
  3. 3Deploy the Azure Bastion host in `Prod-VNet-01` and associate it with the `AzureBastionSubnet` and a new Standard SKU static public IP address.

Answer

To configure Azure Bastion, first create a subnet named AzureBastionSubnet with an address prefix of /26/26. Next, create a Network Security Group (NSG) configured with the mandatory rules for Azure Bastion, and associate it with the AzureBastionSubnet. Finally, deploy the Azure Bastion host and associate it with the AzureBastionSubnet and a Standard SKU static public IP address.
To deploy Azure Bastion, you must follow a specific sequence. First, create a dedicated subnet named exactly AzureBastionSubnet with a prefix size of /26/26 or larger. Second, create a Network Security Group (NSG) with the correct rules and associate it with the AzureBastionSubnet. Third, deploy the Azure Bastion host and associate it with both the subnet and a Standard SKU static public IP address.

Step-by-Step Solution

1
Create the AzureBastionSubnet subnet
A dedicated subnet named AzureBastionSubnet with a /26/26 prefix is created in the virtual network.
Azure Bastion requires a dedicated subnet named exactly AzureBastionSubnet with a prefix of /26/26 or larger.
2
Create and associate the NSG
An NSG with mandatory rules is associated with the AzureBastionSubnet.
The subnet must be secured with the correct NSG inbound/outbound rules before the Bastion host is deployed.
3
Deploy the Azure Bastion host
The Bastion host is provisioned using the subnet and a Standard SKU static public IP.
The Bastion host is the final resource deployed, binding the subnet and public IP together.

Key Concept

Deploying and securing Azure Bastion requires a dedicated subnet named AzureBastionSubnet of size /26/26 or larger, an associated NSG with mandatory rules, and a Standard SKU static public IP address.
Estimated Time:2m 0s
Rate this question

Topics

Configure Azure Bastion

More questions from this topic