Examkin

Soru

Zorluk: OrtaConfigure Azure Bastion

You are deploying Azure Bastion to a virtual network named Corp-VNet. You have created the required subnet named AzureBastionSubnet with a /26 prefix size. You need to configure a Network Security Group (NSG) and associate it with AzureBastionSubnet to support Azure Bastion operations. Which two of the following security rules must be added to the NSG to allow Azure Bastion to function correctly? (Select two.)

  1. An inbound security rule that allows HTTPS traffic on TCP port 443 from the GatewayManager service tagCevap
  2. An outbound security rule that allows RDP and SSH traffic on TCP ports 3389 and 22 to the VirtualNetwork service tagCevap
  3. C
    An inbound security rule that allows RDP and SSH traffic on TCP ports 3389 and 22 from the Internet service tag
  4. D
    An outbound security rule that allows RDP and SSH traffic on TCP ports 3389 and 22 to the Internet service tag

Cevap

The correct configurations are: an inbound security rule allowing HTTPS traffic on TCP port 443 from GatewayManager, and an outbound security rule allowing RDP and SSH traffic on TCP ports 3389 and 22 to the VirtualNetwork.
To support Azure Bastion, the associated Network Security Group (NSG) must allow inbound HTTPS traffic from the control plane (GatewayManager) and outbound RDP/SSH traffic to the target virtual machines in the VirtualNetwork.

Adım Adım Çözüm

1
Identify control plane traffic requirements.
Azure Bastion needs inbound HTTPS (port 443) traffic from the GatewayManager service tag.
This is mandatory for Azure control plane communications and health monitoring.
2
Identify target connectivity traffic requirements.
Azure Bastion must send outbound RDP (port 3389) and SSH (port 22) traffic to the target virtual machines in the VirtualNetwork.
This allows Bastion to establish sessions on the target VMs.
3
Verify internet inbound/outbound RDP and SSH rules.
Direct RDP/SSH traffic from or to the Internet is unnecessary and should be blocked.
Bastion proxy communication uses HTTPS for inbound client connections and strictly routes RDP/SSH to private destinations.

Anahtar Kavram

Azure Bastion Subnet Network Security Group (NSG) Rules
Bu soruyu puanla

Konular

Configure Azure Bastion

Bu konudan daha fazla soru