SC-100 Practice Question 3962
Exam: SC-100
Domain: Design security solutions for infrastructure
Difficulty: easy
An architect needs to secure administrative access to Azure Virtual Machines hosting internal databases without exposing public IP addresses or managing jump boxes. What technology should you deploy?
Answer Options
A
Azure Bastion
B
Public IP addresses assigned to each virtual machine
C
Open port forwarding on TCP port 3389
Correct Answer
A: Azure Bastion
Explanation
Azure Bastion provides browser-based, private RDP and SSH connectivity over TLS directly to VMs via internal private IP addresses, avoiding public IP exposure.