Microsoft Security, Compliance, and Identity Fundamentals SC-900 Practice Question
Your company wants to allow administrators to perform occasional RDP and SSH sessions to virtual machines hosted in an Azure virtual network. Security policy states that VM public IP addresses must not be assigned and administrators must not install any VPN client software. Which Azure service should you deploy to meet these requirements?
Azure Bastion is a platform-managed service that is deployed inside an Azure virtual network. It lets administrators connect to virtual machines over RDP or SSH directly from the Azure portal through an HTML5 browser using an outbound TLS (TCP 443) connection. Because connections go through the Bastion host, the target VMs do not need public IP addresses, and users do not have to install or configure any VPN or additional agents.
The other options do not satisfy the stated constraints:
Azure VPN gateway enables secure connectivity but requires users to set up a VPN client, which the policy forbids.
Azure Application Gateway is a Layer 7 load balancer (often used with Web Application Firewall) and is not intended for remote desktop or SSH access to VMs.
Azure Firewall provides network-level traffic filtering and does not offer interactive RDP/SSH session capabilities to VMs without public IPs.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Azure Bastion, and how does it differ from traditional RDP or SSH connections?
Open an interactive chat with Bash
How does Azure Bastion enhance security for virtual machines compared to using VPN or public IP addresses?
Open an interactive chat with Bash
Can Azure Bastion be used with VMs across different virtual networks?
Open an interactive chat with Bash
Microsoft Security, Compliance, and Identity Fundamentals SC-900
Describe the capabilities of Microsoft security solutions
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .