Microsoft Azure Administrator Associate AZ-104 Practice Question

Implementing Azure Bastion provides secure administrative access to your virtual machines without the need for public IP addresses. Azure Bastion is a managed service that allows you to connect to your VMs using your browser and the Azure portal over SSL. It requires minimal client-side configuration and integrates seamlessly with Azure services.

Configuring a VPN gateway for site-to-site VPN access requires more client-side setup and does not integrate directly with Azure services for administrative access.

Enabling Just-in-Time (JIT) VM access reduces exposure by limiting the time management ports are open but still requires public IP addresses on the VMs.

Deploying a jumpbox virtual machine adds complexity and maintenance overhead, and it may still expose endpoints to the internet.