AZ-303 Exam QuestionsBrowse all questions from this exam

AZ-303 Exam - Question 133


You have the Azure virtual networks shown in the following table.

Exam AZ-303 Question 133

All the virtual networks are peered.

You have the virtual machines shown in the following table.

Exam AZ-303 Question 133

You deploy an Azure Bastion named Bastion1 to VNET1.

To which virtual machines can you connect by using Bastion1?

Show Answer
Correct Answer: D

Azure Bastion allows you to securely connect to virtual machines (VMs) using RDP/SSH without exposing those VMs to the public internet. When you deploy Azure Bastion to a virtual network (VNet), you can use it to connect to VMs within the same VNet as well as VMs in peered VNets. In this scenario, VNET1, VNET2, and VNET3 are all peered, and since Bastion1 is deployed to VNET1, it can connect to VM1, VM2, and VM3 across the peered VNets. Therefore, Azure Bastion will be able to connect to VM1, VM2, and VM3.

Discussion

26 comments
Sign in to comment
valantc
May 31, 2021

Correct answer should be D. Bastion works with peered VNET (https://docs.microsoft.com/en-us/azure/bastion/vnet-peering)

crazyaboutazure
Jul 10, 2021

100% D

SpicyMonkey
Aug 27, 2021

This is correct, I have it tested in production

babyhu
Jun 16, 2021

Once you provision the Azure Bastion service in your virtual network, the RDP/SSH experience is available to all your VMs in the same VNet, as well as peered VNets. https://docs.microsoft.com/en-us/azure/bastion/vnet-peering#:~:text=Azure%20Bastion%20works%20with%20the%20following%20types%20of,network%20peering%3A%20Connecting%20virtual%20networks%20across%20Azure%20regions.

syu31svc
Aug 28, 2021

All virtual networks are peered. This allows us to connect to any VM in the peered VNets. Azure Bastion and VNet peering can be used together. When VNet peering is configured, you don't have to deploy Azure Bastion in each peered VNet. This means if you have an Azure Bastion host configured in one virtual network (VNet), it can be used to connect to VMs deployed in a peered VNet without deploying an additional Bastion host. https://docs.microsoft.com/en-us/azure/bastion/vnet-peering Answer is D

SecaWa5997
Jun 2, 2021

Indeed answer D is correct, the following FAQ shows that it is possible to access peered VNETs even if they are under different subscriptions (but same tennant) https://docs.microsoft.com/en-us/azure/bastion/bastion-faq

AAPaul
Jul 4, 2021

The question states “ All the virtual networks are peered” So Answer is D You can connect to VM1 ,VM2 and VM3

tjanjua
Jun 2, 2021

option D https://docs.microsoft.com/en-us/azure/bastion/vnet-peering

applesauce85
Jun 15, 2021

Bastion works with peering and can work across regions with global peering. D is the right answer.

erunit
May 31, 2021

D is correct

binco
Jun 13, 2021

"All the virtual networks are peered" - so D

mbraak
Jun 15, 2021

Earlier it would be A but nowadays Azure Bastion works with VNET peering so D is the correct answer now.

bittermars
Jun 13, 2021

The question doesn't mention that VNET are peered. By default, Azure Bastion deployment is per virtual network so A is correct. https://docs.microsoft.com/en-us/azure/bastion/bastion-overview

peart123
Jun 30, 2021

The question states “ All the virtual networks are peered”

Bijug
Sep 11, 2021

Once you provision the Azure Bastion service in your virtual network, the RDP/SSH experience is available to all your VMs in the same VNet, as well as peered VNets. This means you can consolidate Bastion deployment to single VNet and still reach VMs deployed in a peered VNet, centralizing the overall deployment.

Aaaashish
Nov 2, 2021

"D" is correct answer.

KemalMOption: D
Feb 15, 2022

VNet peering is supported with Bastion Host

CitizenOfTheUniverseOption: D
Dec 20, 2021

all VNETs are peered

Anand3011
Dec 22, 2021

Correct answer should be D. Architecture Azure Bastion is deployed to a virtual network and supports virtual network peering. Specifically, Azure Bastion manages RDP/SSH connectivity to VMs created in the local or peered virtual networks.

xyz213
Dec 29, 2021

D: Should be the correct answer, Bastion works with peered VNETs !

plmmsg
Dec 30, 2021

D. VM1, VM2, and VM3 it's a peered VNET

mahj123Option: D
Jan 3, 2022

Because the vnet peering

Dawn7Option: D
Jan 4, 2022

I will go with D

KlottingOption: D
Jan 8, 2022

Peered

lucky_777Option: D
Jan 15, 2022

D per example same as in question https://docs.microsoft.com/en-us/azure/bastion/vnet-peering

Ayboum
Feb 3, 2022

https://docs.microsoft.com/fr-fr/azure/bastion/vnet-peering Azure Bastion et l’appairage de réseaux virtuels peuvent être utilisés ensemble. Lorsque l’appairage de réseaux virtuels est configuré, vous ne devez pas déployer Azure Bastion dans chaque réseau virtuel appairé. Cela signifie que, si vous avez un hôte Azure Bastion configuré dans un réseau virtuel, il permettre de se connecter aux machines virtuelles déployées dans un réseau virtuel appairé sans déployer d’hôte Bastion supplémentaire. Pour plus d’informations sur l’appairage de réseaux virtuels, voir À propos de l’appairage de réseaux virtuels.

Choquito
Feb 4, 2022

Bastion Host is an IAAS, and it is used as per VNET. it can not be used for other VNETs. So answer is A

ERROR505Option: D
Feb 13, 2022

Azure Bastion and VNet peering can be used together. When VNet peering is configured, you don't have to deploy Azure Bastion in each peered VNet. This means if you have an Azure Bastion host configured in one virtual network (VNet), it can be used to connect to VMs deployed in a peered VNet without deploying an additional bastion host. https://docs.microsoft.com/en-us/azure/bastion/vnet-peering

Stretchy
Feb 15, 2022

Correct answer should be D. Bastion works with peered VNET (https://docs.microsoft.com/en-us/azure/bastion/vnet-peering)