You have an Azure subscription that contains the resources shown in the following table. All the resources connect to a virtual network named VNet1. You plan to deploy an Azure Bastion host named…

The correct answer is A. VM1 only. Azure Bastion is a service you deploy that lets you connect to a virtual machine using your browser and the Azure portal, or via the native SSH or RDP client already installed on your local computer. The Azure Bastion service is a fully platform-managed PaaS service that you…

Submitted by fernanda_arg· Mar 4, 2026Configure and manage virtual networking

Question

You have an Azure subscription that contains the resources shown in the following table. All the resources connect to a virtual network named VNet1. You plan to deploy an Azure Bastion host named Bastion1 to VNet1. Which resources can be protected by using Bastion1?

Options

AVM1 only
Bcontoso.com only
CApp1 and contoso.com only
DVM1 and contoso.com only
EVM1, App1, and contoso.com

How the community answered

(48 responses)

A
77% (37)
B
13% (6)
C
6% (3)
D
2% (1)
E
2% (1)

Explanation

Azure Bastion is a service you deploy that lets you connect to a virtual machine using your browser and the Azure portal, or via the native SSH or RDP client already installed on your local computer. The Azure Bastion service is a fully platform-managed PaaS service that you provision inside your virtual network. It provides secure and seamless RDP/SSH connectivity to your virtual machines directly from the Azure portal over TLS. When you connect via Azure Bastion, your virtual machines don't need a public IP address, agent, or special client software. https://learn.microsoft.com/en-us/azure/bastion/bastion-overview

Community Discussion

No community discussion yet for this question.

Full AZ-104 Practice