az-104 Practice Question 1741
Exam: az-104
Domain: Implement and manage virtual networking
Topic: Configure secure access to virtual networks
Difficulty: medium
In a hybrid environment, a customer wants to ensure that their Azure Virtual Network (VNet) can securely communicate with on-premises resources without exposing sensitive data. What is the best practice for securing this communication using Azure services?
Answer Options
A
Implement Network Security Groups (NSGs) to control traffic flows.
B
Deploy Azure Bastion for secure access to the VMs.
C
Use Application Security Groups to manage access to resources.
D
Configure Hybrid Connectors to establish a connection between on-premises and Azure resources.
Correct Answer
B: Deploy Azure Bastion for secure access to the VMs.
Explanation
The correct answer is B. Using Azure Bastion allows secure RDP or SSH access to the VMs without opening public ports, courtesy of reducing the attack surface. Option A (NSGs) can control traffic but does not provide secure access methods. Option C (ASGs) are used for managing access to resources within the same Azure subscription or across subscriptions, not for secure access. Option D (Hybrid Connectors) is used for establishing connections but does not provide secure access methods.