Microsoft Azure Administrator — Question 66

You have an Azure subscription that contains 20 virtual machines, a network security group (NSG) named NSG1, and two virtual networks named VNET1 and VNET2 that are peered.

You plan to deploy an Azure Bastion Basic SKU host named Bastion1 to VNET1.

You need to configure NSG1 to allow inbound access to the virtual machines via Bastion1.

Which port should you configure for the inbound security rule?

Answer options

• A. 22
• B. 443
• C. 389
• D. 8080

Correct answer: B

Explanation

The correct answer is B, port 443, as it is used for secure HTTPS traffic, which is necessary for Azure Bastion to function correctly when accessing virtual machines. Port 22 is typically used for SSH access, while ports 389 and 8080 are not relevant for the secure access provided by Azure Bastion.