A company has a production VNet with a single Windows VM that must be administered remotely. The security team requires that no VM have a public IP and that all administrative sessions be logged. Which solution meets these requirements?

Attach a public IP to the VM and restrict the NSG to the admin's IP.

Deploy Azure Bastion in the VNet and connect via the Azure portal.

Create a jump VM with a public IP and RDP through it to the target VM.

Set up a site-to-site VPN and RDP directly to the VM's private IP.

A security team needs to detect a potential brute-force attack on their remote-access VPN. They have VPN gateway logs and Azure AD sign-in logs. Which combination of data is most useful?

Use only VPN gateway logs to see failed authentication attempts.

Monitor NSG flow logs for the VPN gateway subnet.

Use only Azure AD sign-in logs.

Correlate VPN gateway logs with Azure AD sign-in logs to identify repeated failed attempts from the same IP.

A company has a bastion host used for SSH access. The security team wants to implement best practices for remote access security. Which set of actions should be taken?

Keep all services enabled on the bastion to ensure functionality.

Use a single long-lived SSH key for all administrators.

Enable password authentication and allow root login for convenience.

Disable password authentication, use SSH keys, rotate keys regularly, and disable unused services on the bastion.

A company has a remote-access VPN that uses IPsec with IKEv2. They want to ensure that only corporate-managed devices can connect. Which configuration is the most effective?

Use certificate-based authentication with device certificates issued by the corporate CA.

Use EAP-MSCHAPv2 with username/password.

Use a long pre-shared key and rotate it frequently.

Use a pre-shared key and require a specific user-agent.

EC-CouncilCloud Security Essentials

Domain 4Objective 4

Remote Access and Connections CSE Practice Questions (Page 1)

Part of the Network Security in the Cloud domain, which makes up ~10% of our current practice bank.

46questions here

10free pages

8concepts

Questions 1–5

1foundation · easy
Which VPN technology is typically used to securely connect an entire on-premises network to a cloud VNet?
Select an answer first
2application · medium
A company has a production VNet with a single Windows VM that must be administered remotely. The security team requires that no VM have a public IP and that all administrative sessions be logged. Which solution meets these requirements?
Select an answer first
3expert · hard
A security team needs to detect a potential brute-force attack on their remote-access VPN. They have VPN gateway logs and Azure AD sign-in logs. Which combination of data is most useful?
Select an answer first
4application · medium
A company has a bastion host used for SSH access. The security team wants to implement best practices for remote access security. Which set of actions should be taken?
Select an answer first
5expert · hard
A company has a remote-access VPN that uses IPsec with IKEv2. They want to ensure that only corporate-managed devices can connect. Which configuration is the most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSE” is a trademark of its owner, used for identification only.