AZ104-Q: administer a VM without public VM exposure
A security policy forbids public IP addresses on administrator VMs, but administrators need browser-based SSH access to Linux VMs in a VNet. Which service should they deploy?
- A) Traffic Manager.
- B) Azure Front Door.
- C) Azure Bastion in its required dedicated subnet. ✓
- D) Azure Files.
Answer: C. Azure Bastion provides browser-based SSH/RDP access while target VMs can remain without public IPs.
Why not the others: Traffic Manager and Front Door route application traffic. Azure Files is storage.