You have an Azure Virtual Desktop deployment. You need to secure administrative access to session hosts. The solution must require that administrators use the Azure portal to access the session…

The correct answer is B. Azure Bastion. Azure Bastion provides browser-based RDP and SSH connectivity directly through the Azure portal without exposing session hosts to the public internet or requiring a public IP on the VMs. Administrators connect via HTTPS through the portal - exactly matching the requirement…

Submitted by jakub_pl· Apr 18, 2026Plan and implement identity and security

Question

You have an Azure Virtual Desktop deployment. You need to secure administrative access to session hosts. The solution must require that administrators use the Azure portal to access the session hosts. What should you include in the solution?

Options

AAzure Firewall
BAzure Bastion
CConditional Access policies
DMicrosoft Defender for Cloud

How the community answered

(33 responses)

A
9% (3)
B
88% (29)
C
3% (1)

Explanation

Azure Bastion provides browser-based RDP and SSH connectivity directly through the Azure portal without exposing session hosts to the public internet or requiring a public IP on the VMs. Administrators connect via HTTPS through the portal - exactly matching the requirement. Azure Firewall (A) controls network-level traffic but does not provide portal-based RDP access. Conditional Access policies (C) control authentication but do not replace a remote access mechanism. Microsoft Defender for Cloud (D) is a security posture and threat protection service, not a remote access tool.

Topics

#Azure Bastion#Administrative Access#Security#Azure Virtual Desktop

Community Discussion

No community discussion yet for this question.

Full AZ-140 Practice