SC-100 Practice Question 3884
Exam: SC-100
Domain: Design solutions that align with security best practices and priorities
Difficulty: easy
You are designing a secure remote administrative access solution for Azure virtual machines without exposing public IP addresses on the internet. Which service should you architect?
Answer Options
A
Azure Bastion
B
Direct public IP address mapping on VM network interfaces
C
Open port forwarding on TCP port 3389
D
Point-to-Site PPTP VPN
Correct Answer
A: Azure Bastion
Explanation
Azure Bastion provides secure, fully managed RDP and SSH connectivity to virtual machines directly through the Azure portal via TLS, eliminating the need for public IP addresses on VMs.