Create a Virtual Network with Scale Set and Public Access for Azure VMs | AZ-303 Exam Answer

Create a Virtual Network with Scale Set and Public Access for Azure VMs

Question

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You are planning to create a virtual network that has a scale set that contains six virtual machines (VMs).

A monitoring solution on a different network will need access to the VMs inside the scale set.

You need to define public access to the VMs.

Solution: Deploy a standalone VM that has a public IP address to the virtual network.

Does the solution meet the goal?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B.

A

The solution proposed is not ideal for meeting the stated goal of allowing a monitoring solution on a different network to access the virtual machines inside the scale set.

Deploying a standalone VM with a public IP address to the virtual network will only provide public access to the standalone VM and not to the VMs inside the scale set. The monitoring solution would still need to be able to access the VMs inside the scale set, which are on a different network, in order to perform monitoring and management tasks.

To provide access to the VMs inside the scale set, you could use Azure Bastion, which provides secure and seamless RDP/SSH connectivity to the virtual machines over SSL using a browser and Azure Portal. Azure Bastion is deployed within your virtual network and provides a dedicated and hardened jump box that you can connect to using Remote Desktop Protocol (RDP) or Secure Shell (SSH).

Another option could be to use a VPN gateway to create a site-to-site VPN connection between your virtual network and the network where the monitoring solution is located. This would allow the monitoring solution to access the virtual machines inside the scale set securely over the VPN connection.

In summary, while the proposed solution of deploying a standalone VM with a public IP address to the virtual network may provide public access to the VM, it does not meet the stated goal of allowing a monitoring solution on a different network to access the virtual machines inside the scale set. Therefore, the correct answer is B. No.