Remote Access and Connections CSE Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is the primary benefit of using role-based access control (RBAC) for remote access permissions?

   • AIt eliminates the need for authentication
   • BIt automatically grants all users full access to all resources
   • CIt allows users to share credentials for simplicity
   • DIt grants permissions based on the user's role, following least privilege
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A cloud administrator needs to provide secure administrative access to a set of Windows VMs located in a private subnet. The company requires that all administrative sessions be recorded for compliance and that access be granted only to the IT team. The administrator wants to avoid exposing the VMs directly to the internet. Which solution best meets these requirements?

   • ADeploy a bastion host in a public subnet with a public IP, restrict its NSG to allow RDP only from the IT team's public IPs, and enable session recording on the bastion.
   • BPlace the VMs in a public subnet and use Azure Bastion without additional NSG rules.
   • CCreate a site-to-site VPN to the corporate office and allow all IT staff to RDP directly to the VMs using their domain credentials.
   • DAssign each VM a public IP and configure an NSG to allow RDP from any IP in the corporate office range.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which IAM feature should be enforced for all remote access users to add an extra layer of security beyond passwords?

   • APassword expiration
   • BResource tagging
   • CSingle sign-on (SSO)
   • DMulti-factor authentication (MFA)
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A company has a site-to-site VPN between its on-premises network and a cloud VNet. They want to ensure that only specific subnets on-premises can access specific subnets in the cloud. What should they configure?

   • ADefine network security groups and route tables to filter traffic between subnets.
   • BApply a firewall on each VM to filter traffic.
   • CUse the VPN gateway's traffic selector policies to restrict allowed subnets.
   • DCreate a separate VPN for each subnet pair.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A company wants to allow remote employees to access internal web applications without exposing the applications to the internet. Which solution is most appropriate?

   • ADeploy an SSL/TLS VPN gateway that provides access to the internal web apps.
   • BUse a site-to-site IPsec VPN for each remote employee.
   • COpen the web app ports in the NSG to the internet.
   • DPublish the web apps on a public IP with a strong password.
   Reveal Solution Discussion Select an answer first