Перейти до основного вмісту
Answer confirmed
Question

You have an Azure subscription that contains a virtual machine named VM1 and virtual network named VNet1 that has a single subnet named Subnet1. VM1 is connected to Subnet1.

You need to ensure that you can connect to VM1 by using Azure Bastion.

What should you do first?

Proposed answer
  • Create a network security group (NSG) and associate it with Subnet1.
  • Create a network security group (NSG) and associate it with the network interface of VM1.
  • Create a subnet on VNet1.
  • This answer is correct.
  • Deploy a second virtual machine to Subnet1. 
Correct answer

Create a subnet on VNet1.

  • Incorrect - Azure Bastion does not depend on the presence of NSGs.
  • Incorrect - Azure Bastion does not depend on the presence of NSGs.
  • Correct - To deploy an Azure Bastion host, you need to first create a dedicated virtual network subnet.
  • Incorrect - Deploying Azure virtual machines have no relevance when implementing Azure Bastion.

Manage Windows Virtual Machines with Azure Bastion - Training | Microsoft Learn