Exam AZ-104 topic 5 question 115 discussion

Be aware when checking CyberKelev comments - I think he is a troll as most of the time he posts wrong answers. Always verify with other comments

A is the answer. https://learn.microsoft.com/en-us/azure/bastion/bastion-overview Azure Bastion is a service you deploy that lets you connect to a virtual machine using your browser and the Azure portal, or via the native SSH or RDP client already installed on your local computer. The Azure Bastion service is a fully platform-managed PaaS service that you provision inside your virtual network. It provides secure and seamless RDP/SSH connectivity to your virtual machines directly from the Azure portal over TLS. When you connect via Azure Bastion, your virtual machines don't need a public IP address, agent, or special client software.

Azure Bastion is a service you deploy that lets you connect to a virtual machine using your browser and the Azure portal, or via the native SSH or RDP client already installed on your local computer

I actually choose E (everything) when this came up on the exam even though I knew it only is for VM use. I thought Microsoft were trying to teach a lesson i.e. "by protecting the VM you also indirectly protect everything else sharing the same VNET". That's what happens when you overthink... (so right answer is very likely A)

Azure Bastion is a service you deploy that lets you connect to a virtual machine using your browser and the Azure portal, or via the native SSH or RDP client already installed on your local computer

A is correct

Using the word "protected" here is odd to me, but Bastion is a form of RDP, its only going to reach the VM. Answer is A.

Bastion provides secure RDP and SSH connectivity to all of the VMs in the virtual network in which it is provisioned. Using Azure Bastion protects your virtual machines from exposing RDP/SSH ports to the out-side world, while still providing secure access using RDP/SSH. "Protection against port scanning : Your VMs are protected against port scanning by rogue and malicious users because you don't need to expose the VMs to the internet." https://learn.microsoft.com/en-us/azure/bastion/bastion-overview

Bastion provides secure RDP and SSH connectivity to all of the VMs in the virtual network in which it is provisioned. Using Azure Bastion protects your virtual machines from exposing RDP/SSH ports to the outside world, while still providing secure access using RDP/SSH.

E. VM1, App1, and contoso.com. Azure Bastion is a fully managed PaaS service that provides secure and seamless RDP/SSH connectivity to the virtual machines within a virtual network. By deploying Bastion1 to VNet1, you can protect the access to all the resources connected to the virtual network, including VM1, App1, and contoso.com. Bastion1 provides a secure and streamlined way to access the virtual machines within VNet1 without the need to configure a public IP address or a VPN.

correct answer A -- https://learn.microsoft.com/en-us/azure/bastion/bastion-overview