AZ-104 Certification Practice Question #262

Question

You have an Azure subscription that contains the virtual networks shown in the following table.

The subscription contains the virtual machines shown in the following table.

Each virtual machine contains only a private IP address.

You create an Azure bastion for VNet1 as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Accepted Answer

1. **Statement 1 (No):** Connecting to a virtual machine via a local native RDP client (such as `mstsc.exe`) through Azure Bastion requires the **Native Client Support** feature. This feature is only available in the **Standard** and **Premium** SKUs. Since Bastion1 is configured under the **Basic** SKU (as shown in the exhibit), local native client connections are not supported; users must use the HTML5-based RDP/SSH inside the Azure portal.
2. **Statement 2 (Yes):** Azure Bastion supports connectivity to virtual machines residing in peered virtual networks. Since `VNet1` (hosting Bastion1) and `VNet2` (hosting VM2) are peered, and the Basic SKU supports SSH through the Azure portal web browser, you can connect successfully to `VM2`.
3. **Statement 3 (No):** Virtual network peering is **non-transitive**. While `VNet1` is peered with `VNet2`, and `VNet2` is peered with `VNet3`, there is no direct peering between `VNet1` and `VNet3`. Therefore, Bastion1 in `VNet1` cannot route traffic to `VM3` in `VNet3`.

More AZ-104 practice questions