Home › Azure AZ-500 › cloudcomputing › az500networking › Which Azure service lets a security engineer SSH…
Which Azure service lets a security engineer SSH or RDP into a VM through the Azure portal — WITHOUT exposing a public IP on the VM itself?
AAzure Cache for Redis
BAzure DNS
CDirect RDP/SSH on a public-IP VM
DAzure Bastion
Answer & Solution
Correct answer: D. Azure Bastion
Bastion is a jump-host PaaS that eliminates public IPs on VMs (per AZ-500 §3 remote access). The other options either expose IPs or aren't access tools.
Related questions
Which Azure Virtual Network feature should a security engineer use to define custom routinWhich Azure tool should a security engineer use to capture and analyse VNet traffic flows Which Microsoft Defender for Cloud feature lets a security engineer OPEN management ports Which Azure networking feature should a security engineer use to give an Azure storage accWhich Azure networking feature should a security engineer use to give a VM-hosted workloadWhich Azure DDoS protection tier should a security engineer recommend for an internet-faciWhich Azure global edge service should a security engineer use to protect a globally-distrWhich Azure service is the canonical L7 application gateway with built-in Web Application