az-104 Practice Question 1744
Exam: az-104
Domain: Implement and manage virtual networking
Topic: Configure secure access to virtual networks
Difficulty: medium
A customer is facing permission bottlenecks in their hybrid environment where they need to grant access to multiple on-premises users to a specific Azure VM. What is the most efficient way to manage these permissions using Azure services?
Answer Options
A
Implement Network Security Groups (NSGs) to control traffic flows.
B
Use Azure Active Directory (AAD) roles and groups to manage access.
C
Use Application Security Groups to manage access to resources.
D
Configure Hybrid Connectors to establish a connection between on-premises and Azure resources.
Correct Answer
B: Use Azure Active Directory (AAD) roles and groups to manage access.
Explanation
The correct answer is B. Using Azure Active Directory (AAD) roles and groups to manage access to the VM is the most efficient way to handle multiple users' permissions. Option A (Using NSGs) controls network traffic but does not manage user permissions. Option C (Using ASGs) manages access to resources within the same Azure subscription or across subscriptions, not for user permissions. Option D (Using Hybrid Connectors) establishes connections but does not manage user permissions.