Microsoft Azure Administrator Associate AZ-104 Practice Question
Your company needs to provide secure and seamless RDP and SSH access to virtual machines in an Azure virtual network without exposing any network endpoints to the internet. The solution should eliminate the need to manage or open inbound ports through Network Security Groups (NSGs). What is the BEST way to achieve this requirement?
Use a VPN gateway to connect to the virtual network and access the VMs privately.
Use Azure Bastion to connect to the VMs over SSL through the Azure portal.
Implement a jumpbox VM with an external address within the virtual network.
Assign external addresses to the VMs and restrict inbound traffic using NSGs.