Azure AD Privileged Identity Management | Solution for Encouraging Password Change from Unidentified IP Addresses

Encouraging Password Change from Unidentified IP Addresses

Prev Question Next Question

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your Azure environment contains multiple Azure virtual machines.

You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.

Solution: You modify a DDoS protection plan.

Does this meet the goal?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B.

B

DDoS is a form of attack on a network resource. A DDoS protection plan is used to protect against DDoS attacks; it does not provide connectivity to a virtual machine.

To ensure that a virtual machine named VM1 is accessible from the Internet over HTTP, you need to modify a network security group or Azure Firewall.

https://docs.microsoft.com/en-us/azure/virtual-network/ddos-protection-overview

No, modifying a DDoS protection plan will not meet the goal of ensuring that a virtual machine named VM1 is accessible from the Internet over HTTP.

DDoS (Distributed Denial of Service) protection plans are used to protect resources from DDoS attacks. They do not provide network connectivity or allow external access to resources such as virtual machines.

To allow external access to a virtual machine over HTTP, you need to perform the following steps:

  1. Assign a public IP address to the virtual machine. You can either use an existing public IP address or create a new one.

  2. Configure a network security group (NSG) to allow inbound HTTP traffic (port 80) to the virtual machine.

  3. Configure the virtual machine's firewall to allow inbound HTTP traffic (port 80).

Once these steps are completed, the virtual machine will be accessible from the Internet over HTTP using the public IP address assigned to it.

Therefore, the correct solution to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP is to assign a public IP address to the virtual machine and configure the necessary network security group and firewall rules to allow inbound HTTP traffic to the virtual machine.