Exam AZ-104 topic 5 question 120 discussion

Explanation: Azure Bastion is a service you deploy that lets you connect to a virtual machine using your browser and the Azure portal, or via the native SSH or RDP client already installed on your local computer. The native client feature lets you connect to your target VMs via Bastion using Azure CLI, and expands your sign-in options to include local SSH key pair and Azure Active Directory (Azure AD). Using the native client requires the Standard SKU tier for Azure Bastion. First, we need to upgrade the SKU of our Azure Bastion instance. Second, we need to enable the native client support from the configuration settings of Bastion1 in the Azure Portal. Third, we need to sign in to our Azure account and select the subscription containing the Bastion resource as shown below:

Correct Answer! Nobrainer :) Just learn from ET, no need for another study material. I passed the exam yesterday with 930 out of 1000. Best of luck guys

You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers. You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines. You need to ensure that visitors are serviced by the same web server for each request. What should you configure? A. Floating IP (direct server return) to Enabled B. Session persistence to Client IP C. Protocol to UDP D. Idle Time-out (minutes) to 20

Device 1 is already installed with the native client Azure CLI, to use Azure Bastion with a native client, the SKU must be Standard and I'm assuming or Premium. So, since CLI is already installed we would need to upgrade the SKU, from bastion select Native Client and then access the CLI from Device 1

CORRECT

Device1 has Azure PowerShell and Azure Command-Line Interface (CLI) installed Therefore they seems using the web-based to connect ( not native client ) ref : reference https://learn.microsoft.com/en-us/azure/bastion/bastion-connect-vm-rdp-windows steps 1-Upgrade Bastion1 to the Standard SKU 2-From Bastion1, enable Kerberos authentication 3-From Azure CLI on Device1, run az network bastion rdp

6/13/24 on exam

Upgrade Bastion1 to the Standard SKU. From Bastion1, select Native Client Support. On Device1, run mstsc.exe.

Given answer is correct

From Bastion1, select Native Client Support. Upgrade Bastion1 to the Standard SKU. From VM1, enable just-in-time (IIT) VM access.

I have been told by a few people that took the exam that these questions are exactly what is on the exam. THE QUESTIONS ARE CHANGING ON JULY 28, 2023. If you are using these questions and answers, take your test by the 22nd.

This was on exam yesterday but I got it wrong and failed the exam, hopefully I pass on second attempt

Given answer looks correct as per the information here

Why does it need to be standard?

*) Select native client support The native client feature lets you connect to your target VMs via Bastion using Azure CLI, and expands your sign-in options to include local SSH key pair and Azure Active Directory (Azure AD). Additionally with this feature, you can now also upload or download files, depending on the connection type and client. https://learn.microsoft.com/en-us/azure/bastion/connect-native-client-windows 3) From Azure CLI on device1 run: az network bastion rdp https://learn.microsoft.com/en-us/cli/azure/network/bastion?view=azure-cli-latest#az-network-bastion-rdp

Navigate to the Configuration page for your Bastion resource. Verify that the SKU Tier is Standard. If it isn't, select Standard. Select the box for Native Client Support, then apply your changes. To connect via RDP, use the following command (az network bastion rdp --name "<BastionName>" --resource-group "<ResourceGroupName>" --target-resource-id "<VMResourceId>") https://learn.microsoft.com/en-us/azure/bastion/connect-native-client-windows

Answer seems ok as per link https://learn.microsoft.com/en-us/azure/bastion/connect-native-client-windows