az-104 Practice Question 1743
Exam: az-104
Domain: Implement and manage virtual networking
Topic: Configure secure access to virtual networks
Difficulty: medium
An organization needs to implement a secure hybrid environment where on-premises users can access Azure VMs through a secure channel. Which Azure service would you recommend to facilitate this requirement while ensuring secure access and minimizing exposure to potential threats?
Answer Options
A
Implement Network Security Groups (NSGs) to control traffic flows.
B
Deploy Azure Bastion for secure access to the VMs.
C
Use Application Security Groups to manage access to resources.
D
Configure Hybrid Connectors to establish a connection between on-premises and Azure resources.
Correct Answer
B: Deploy Azure Bastion for secure access to the VMs.
Explanation
The correct answer is B. Azure Bastion provides secure RDP or SSH access to VMs without opening public ports, reducing the risk of unauthorized access. Option A (NSGs) can control traffic but do not provide secure access methods. Option C (ASGs) are used for managing access to resources within the same Azure subscription or across subscriptions, not for secure access. Option D (Hybrid Connectors) is used for establishing connections but does not provide secure access methods.