Soru

Zorluk: KolayConfigure Azure Bastion

An administrator needs to configure secure remote access to virtual machines in an Azure virtual network named VNet1 using Azure Bastion. What is the correct sequence of steps to configure and connect using Azure Bastion?

  1. 1Add a subnet named AzureBastionSubnet with an address prefix of /26 or larger to VNet1.
  2. 2Create a static public IP address configured with the Standard SKU.
  3. 3Deploy the Azure Bastion host resource and associate it with the subnet and public IP.
  4. 4Connect to a virtual machine in VNet1 using the Bastion option in the Azure portal.

Cevap

To configure and use Azure Bastion, you must first create the AzureBastionSubnet (/26 or larger), provision a Standard SKU public IP with static allocation, deploy the Azure Bastion host, and then connect to the virtual machine using the Bastion option.
The correct sequence begins with the infrastructure prerequisites: creating the 'AzureBastionSubnet' with a /26 or larger prefix, creating a Standard SKU public IP address, deploying the Bastion host linked to these resources, and finally establishing a secure connection to a virtual machine in the network.

Adım Adım Çözüm

1
Configure the AzureBastionSubnet subnet
A dedicated subnet named AzureBastionSubnet with a prefix of /26 or larger is added to VNet1.
This is a prerequisite for routing Bastion traffic.
2
Create the Public IP address
A static Standard SKU public IP address is created in the subscription.
Azure Bastion does not support Basic SKU public IP addresses.
3
Deploy the Bastion host
The Azure Bastion host is deployed and linked to the subnet and public IP.
This completes the backend service provisioning.
4
Establish VM connection
A secure session is established to the virtual machine directly through the browser.
This allows remote administration without exposing public IP addresses on the target VMs.

Anahtar Kavram

Azure Bastion requires a dedicated subnet named AzureBastionSubnet with at least a /26 prefix and a Standard SKU public IP address before the host can be deployed.
Tahmini Süre:45s
Bu soruyu puanla