Remote Access and Connections CSE Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A cloud administrator needs to configure secure remote access for a team of developers who use SSH to manage Linux VMs. The company policy requires that developers use their individual accounts, that SSH keys be used instead of passwords, and that access be limited to the development environment. Which configuration should be implemented?

   • ACreate a shared developer account with a strong password and allow SSH access to all VMs.
   • BCreate individual IAM users for each developer, generate SSH key pairs, and assign a role that allows SSH access only to the development VMs.
   • CGenerate a single SSH key pair and distribute it to all developers.
   • DUse password-based authentication and enable MFA on the SSH service.
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A company has a bastion host that is the only entry point to a private subnet. They want to implement MFA for SSH access to the bastion. Which approach is the most effective?

   • AUse a long-lived SSH key for each admin.
   • BUse an SSH certificate with a short validity and require a one-time password (OTP) via PAM.
   • CDisable password authentication and use only keys.
   • DAllow SSH only from a VPN and rely on the VPN's MFA.
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   A company has a remote-access VPN that uses a single admin account for all users. They want to improve accountability and auditability. Which change is the most important?

   • AKeep the shared account but enable detailed logging.
   • BRotate the shared password weekly.
   • CUse a service account for all VPN users.
   • DCreate individual user accounts and enforce MFA for each.
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   A company has a remote-access VPN that uses a shared secret for authentication. They want to move to a more secure model without replacing the VPN infrastructure. Which change is most effective?

   • ADisable the VPN and use a jump host with a public IP.
   • BIncrease the shared secret length and rotate it monthly.
   • CIntegrate the VPN with the company's identity provider and enforce MFA.
   • DUse a second shared secret for each user.
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   Which protocol is commonly used to provide a graphical remote desktop session to a Windows cloud VM?

   • ASSH
   • BIPsec
   • CRDP
   • DTLS
   Reveal Solution Discussion Select an answer first