Assisted Lab: Secure Cloud Components (Azure)

Question 1

In the DevToProd-link console, what Peer is shown?

DevDept-vnet
Prod-vnet
default-vnet
No virtual networks are displayed

Answer 1

Prod-vnet

Question 2

The networking section of the virtual machines displays inbound and outbound port rules. Which of the following best describes why the default “DenyAllInBound” and “DenyAllOutBound” rules appears at the end of the rules list?

All attempted connections that don’t match an earlier rule will match the default deny rule and be blocked

Rules are in alphabetical order

No attempted connections that match an earlier rule will match the default deny rule and be blocked

Answer 2

All attempted connections that don’t match an earlier rule will match the default deny rule and be blocked

Question 3

What are the default port numbers for the SSH and RDP management protocols? (Choose two)

SSH = 22/tcp
RDP = 3389/tcp
SSH = 22/udp
RDP = 3389/udp
RDP = 443/tcp
SSH = 23/tcp

Answer 3

SSH = 22/tcp
RDP = 3389/tcp

Question 4

Which of the following best represents why Azure recommends management ports be closed?

Management ports are common targets for attacks

Management ports increase network congestion

Management ports do not provide any functionality

Management ports only support legacy administrative tools

Answer 4

Management ports are common targets for attacks