Module 4: Administer and manage Windows Server IaaS Virtual Machine remotely > Unit: Manage Windows Virtual Machines with Azure Bastion

Question	Answer
What is Azure Bastion?	a PaaS service that provides RDP and SSH connectivity to Azure VM's. In essence it is a jump server. It is configured to withstand attacks.
What is a security threat that is mitigated by using Azure Bastion?	You don't have to expose RDP or SSH ports of your VM's to the internet
In what scope is Azure Bastion deployed?	Per VNet, rather then per subscription or per account.
Name 5 features of Azure Bastion	- RDP and SSH via the Azure Portal - RDP and SSH over port 443, this enables firewall traversal - No Public IP required on the Azure VM - Protection against port scanning - Hardening of VM only required on the Bastion Host
Name 3 Azure Bastion subnet requirements	- Must be named AzureBastionSubnet - Have a prefix of at least /27 - Be in the VNet you intend to protect with Azure Bastion

Resource summary

	Created by Rick Schoenman almost 3 years ago