thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Intermediate

Azure Bastion

Azure PaaS service providing secure RDP and SSH access to VMs over TLS from the portal without public IPs on the VMs.

Definition

Azure Bastion is deployed into a dedicated subnet named AzureBastionSubnet and brokers RDP/SSH sessions over port 443, so VMs need no public IP addresses or open management ports. SKUs (Developer, Basic, Standard, Premium) add features such as native client support, shareable links and session recording.

Example

Admins connect to private Windows VMs through Bastion in the browser, with no inbound 3389 rule on the NSG.

Exam tip

Bastion is the answer for secure VM management without exposing RDP/SSH to the internet.

Related terms