Remote Access and Connections CSE Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company has a mix of remote employees who need access to cloud resources from various locations, and a branch office that needs a persistent connection to the cloud. The company wants to minimize the attack surface by not exposing management interfaces directly to the internet. Which remote access method should be used for individual employees?

   • ADirect RDP over the internet
   • BSSH tunneling from each employee's laptop
   • CRemote-access VPN using SSL/TLS
   • DSite-to-site IPsec VPN
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A cloud administrator needs to grant a contractor temporary access to a single VM for a two-week project. The contractor should only be able to start/stop the VM and not access other resources. Which approach is the least-privilege and most auditable?

   • AGrant the contractor Owner access to the resource group for the project duration.
   • BCreate a custom role with only the required VM actions and assign it to the contractor for two weeks.
   • CAdd the contractor to the VM Contributor role permanently.
   • DShare the VM's admin credentials with the contractor.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   An organization has implemented a remote-access VPN. The security team wants to detect compromised VPN credentials by monitoring for unusual login patterns, such as logins from different geographic locations within a short time. Which monitoring approach should be implemented?

   • AMonitor only failed login attempts.
   • BRequire MFA for all VPN users and stop monitoring.
   • CDisable VPN logging to protect user privacy.
   • DEnable VPN logging and configure an alert for multiple successful logins from different locations within a short time window.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which remote access method provides an encrypted tunnel for a single user's device to securely connect to a cloud VNet from an untrusted network?

   • ASite-to-site VPN
   • BRemote access VPN
   • CBastion host
   • DDirect peering
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which practice is a key best practice for securing remote access to cloud resources?

   • ADisabling all security controls for convenience
   • BUsing the same key for all users
   • CApplying the principle of least privilege
   • DGranting all users full administrative rights
   Reveal Solution Discussion Select an answer first