Examkin

Soru

Zorluk: OrtaConfigure Azure Bastion

An enterprise administrator manages a single virtual network named Production-VNet containing a subnet named AzureBastionSubnet. The virtual network hosts several Linux and Windows virtual machines. A bastion host named Prod-Bastion is deployed in the subnet using the Basic SKU. Developers need to connect to these virtual machines through Prod-Bastion using non-standard SSH and RDP ports. Which action must the administrator perform to support this configuration?

  1. Upgrade the Azure Bastion SKU from Basic to Standard.Cevap
  2. B
    Deploy a new Azure Bastion host in a new subnet named BastionSubnet configured with a /27 prefix.
  3. C
    Associate a new Network Security Group (NSG) to the AzureBastionSubnet that blocks inbound traffic from the GatewayManager service tag.
  4. D
    Configure virtual network peering with transit gateway routing enabled on the target virtual machines.

Cevap

Upgrade the Azure Bastion SKU from Basic to Standard.
Upgrading the Azure Bastion host to the Standard SKU is required to enable support for custom ports. The Basic SKU only allows connectivity to target VMs using standard ports (22 for SSH and 3389 for RDP), whereas the Standard SKU supports custom port selection.

Adım Adım Çözüm

1
Identify the SKU capability requirements for custom ports.
The Basic SKU of Azure Bastion only supports standard connectivity to target VMs (port 22 for SSH and port 3389 for RDP). The Standard SKU is required to configure and connect via custom (non-standard) port numbers.
This establishes that the current Basic SKU is the limiting factor preventing connections via non-standard ports.
2
Determine the upgrade path.
Azure Bastion allows an in-place upgrade from the Basic SKU to the Standard SKU.
This confirms that upgrading the SKU directly is a valid and supported administrative action.
3
Perform the upgrade.
The Azure Bastion host is upgraded to the Standard SKU, enabling the custom ports feature.
Completing this action allows developers to connect using their desired non-standard SSH and RDP port configurations.

Anahtar Kavram

Azure Bastion SKU capabilities and feature differences
Bu soruyu puanla

Konular

Configure Azure Bastion

Bu konudan daha fazla soru