All resources are connected to VNet1. You will deploy an Azure Bastion host named Bastion1 into VNet1. Which of the following resources can Bastion1 provide protection for?
Choose an answer
Tap an option to check your answer.
Correct answer: VM1 only.
Why this is the answer
Azure Bastion provides secure and seamless RDP/SSH connectivity to your virtual machines (VMs) directly through the Azure portal over SSL. It eliminates the need for public IP addresses on your VMs, enhancing security. Therefore, Bastion1, deployed in VNet1, can only provide protection for VM1, which is a virtual machine. Incorrect options: contoso.com is a domain name, not an Azure resource that Bastion protects. App1 is an Azure App Service, which is a Platform as a Service (PaaS) offering. Azure Bastion is designed for Infrastructure as a Service (IaaS) VMs, not PaaS services.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed