Remote Access and Connections CSE Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A company is migrating to the cloud and needs to provide remote access for a team of contractors. The contractors will use their own laptops and need access to a specific application server for a limited time. The security team wants to enforce least privilege, ensure that access is revoked when the contract ends, and avoid managing contractor accounts in the corporate directory. Which approach should be used?

   • ACreate local accounts for each contractor in the application server and delete them manually when the contract ends.
   • BAdd contractors to the corporate directory and assign them the same role as employees.
   • CUse a cloud identity provider with federated access, assign a temporary role with access to the application server, and set an expiration on the role assignment.
   • DProvide contractors with a shared VPN account and a shared password.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which activity is essential for detecting unauthorized remote access attempts?

   • ALogging and monitoring remote access sessions
   • BDisabling all logging to save storage
   • CUsing default passwords for all accounts
   • DOpening all ports to simplify access
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company has a remote office that needs to access resources in a cloud VPC. The office has a dynamic public IP address, and the company wants to use a site-to-site VPN. The cloud VPN gateway requires the on-premises VPN device's public IP to be configured. Which solution should be used to handle the dynamic IP?

   • AUse a cloud VPN gateway with a public IP and require the office to use a static IP from their ISP.
   • BUse a VPN device that supports dynamic DNS and configure the cloud VPN gateway to use the dynamic DNS name.
   • CConfigure the VPN gateway with a static IP that is updated manually each time the office IP changes.
   • DUse a remote-access VPN instead of a site-to-site VPN.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A security team wants to audit all RDP sessions to a bastion host. Which configuration is most effective?

   • AEnable RDP session logging on the bastion host and forward logs to a SIEM.
   • BStore RDP credentials in a shared vault.
   • CUse Azure Monitor to track VM CPU usage.
   • DEnable NSG flow logs for the bastion subnet.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the function of a network security group (NSG) in a cloud VNet?

   • ATo load balance traffic across VMs
   • BTo filter traffic based on source/destination IP, port, and protocol
   • CTo provide DNS resolution for the VNet
   • DTo encrypt all traffic between VMs
   Reveal Solution Discussion Select an answer first