Microsoft Azure Administrator Associate AZ-104 Practice Question

Deploying Azure Bastion to the virtual network allows secure access to your virtual machines directly through the Azure portal without exposing them to the internet. Azure Bastion provides seamless and secure connectivity using SSL, keeping your VMs within the private network while eliminating the need for public addresses.

An Application Gateway (Option B) is used for load balancing web traffic and does not support remote desktop protocols. Setting up a jumpbox VM accessible from the internet (Option C) introduces security risks by exposing a VM to the public internet, which you want to avoid. Implementing a VPN Gateway for remote connectivity (Option D) requires additional client-side configuration and does not provide direct access through the Azure portal.