QUESTION: 424 Exam Topic: Deploy and manage Azure compute resources Questions

You have an Azure subscription named Subscription1. Subscription1 contains a virtual machine named VM1. You have a computer named Computer1 that runs Windows 10. Computer1 is connected to the Internet.
You add a network interface named vm1173 to VM1 as shown in the exhibit. (Click the Exhibit tab.)

From Computer1, you attempt to connect to VM1 by using Remote Desktop, but the connection fails. You need to establish a Remote Desktop connection to VM1.
What should you do first?

Change the priority of the RDP rule
Attach a network interface
Delete the DenyAllInBound rule
Start VM1

Answer(s): D

Explanation:

Incorrect Answers:
A: Rules are processed in priority order, with lower numbers processed before higher numbers, because lower numbers have higher priority. Once traffic matches a rule, processing stops. RDP already has the lowest number and thus the highest priority.
B: The network interface has already been added to VM. C: The Outbound rules are fine.

Reference:

https://docs.microsoft.com/en-us/azure/virtual-network/security-overview

Reveal Solution Next Question

QUESTION: 425 Exam Topic: Deploy and manage Azure compute resources Questions

You have the Azure virtual machines shown in the following table.

A DNS service is installed on VM1.
You configure the DNS servers settings for each virtual network as shown in the following exhibit.

You need to ensure that all the virtual machines can resolve DNS names by using the DNS service on VM1. What should you do?

Configure a conditional forwarder on VM1
Add service endpoints on VNET1
Add service endpoints on VNET2 and VNET3
Configure peering between VNET1, VNET2, and VNET3

Answer(s): D

Explanation:

Virtual network peering enables you to seamlessly connect networks in Azure Virtual Network. The virtual networks appear as one for connectivity purposes. The traffic between virtual machines uses the Microsoft backbone infrastructure.

Incorrect Answers:
B, C: Virtual Network (VNet) service endpoint provides secure and direct connectivity to Azure services over an optimized route over the Azure backbone network. Endpoints allow you to secure your critical Azure service resources to only your virtual networks. Service Endpoints enables private IP addresses in the VNet to reach the endpoint of an Azure service without needing a public IP address on the VNet.

Reference:

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overview

Reveal Solution Next Question

QUESTION: 426 Exam Topic: Deploy and manage Azure compute resources Questions

HOTSPOT (Drag and Drop is not supported)
You have an Azure subscription that contains the Azure virtual machines shown in the following table.

You add inbound security rules to a network security group (NSG) named NSG1 as shown in the following table.

You run Azure Network Watcher as shown in the following exhibit.

You run Network Watcher again as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

Box 1: No
It limits traffic to VM2, but not VM1 traffic.

Box 2: Yes
Yes, the destination is VM2. Box 3: No

Reference:

https://docs.microsoft.com/en-us/azure/virtual-network/network-security-group-how-it-works

Reveal Solution Next Question

QUESTION: 427 Exam Topic: Deploy and manage Azure compute resources Questions

You have the Azure virtual network named VNet1 that contains a subnet named Subnet1. Subnet1 contains three Azure virtual machines. Each virtual machine has a public IP address.

The virtual machines host several applications that are accessible over port 443 to users on the Internet. Your on-premises network has a site-to-site VPN connection to VNet1.
You discover that the virtual machines can be accessed by using the Remote Desktop Protocol (RDP) from the Internet and from the on-premises network.

You need to prevent RDP access to the virtual machines from the Internet, unless the RDP connection is established from the on-premises network. The solution must ensure that all the applications can still be accessed by the Internet users.

What should you do?

Modify the address space of the local network gateway
Create a deny rule in a network security group (NSG) that is linked to Subnet1
Remove the public IP addresses from the virtual machines
Modify the address space of Subnet1

Answer(s): B

Explanation:

You can use a site-to-site VPN to connect your on-premises network to an Azure virtual network. Users on your on-premises network connect by using the RDP or SSH protocol over the site-to-site VPN connection. You don't have to allow direct RDP or SSH access over the internet.

Reference:

https://docs.microsoft.com/en-us/azure/security/fundamentals/network-best-practices

Reveal Solution Next Question

Free AZ-104 Exam Braindumps (page: 37)

QUESTION: 424 Exam Topic: Deploy and manage Azure compute resources Questions

Explanation:

Reference:

QUESTION: 425 Exam Topic: Deploy and manage Azure compute resources Questions

Explanation:

Reference:

QUESTION: 426 Exam Topic: Deploy and manage Azure compute resources Questions

Explanation:

Reference:

QUESTION: 427 Exam Topic: Deploy and manage Azure compute resources Questions

Explanation:

Reference: