Azure Bastion for secure VM access - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is Azure Bastion?

Azure Bastion is a managed service that provides secure and seamless RDP and SSH connectivity to virtual machines directly through the Azure portal without exposing the VM to the public internet.

beginner

How does Azure Bastion improve VM security?

Azure Bastion eliminates the need for public IP addresses on VMs and protects against port scanning and other attacks by providing RDP/SSH access over SSL through the Azure portal.

beginner

Which protocols does Azure Bastion support for VM access?

Azure Bastion supports RDP (Remote Desktop Protocol) for Windows VMs and SSH (Secure Shell) for Linux VMs.

intermediate

What is required to use Azure Bastion in a virtual network?

You need to deploy an Azure Bastion host in the virtual network with a dedicated subnet named 'AzureBastionSubnet' that has a minimum /27 address space.

intermediate

Can Azure Bastion be used to connect to VMs across different virtual networks?

By default, Azure Bastion connects to VMs in the same virtual network. To connect across virtual networks, peering or VPN connections must be configured between the networks.

What does Azure Bastion eliminate the need for when accessing VMs?

A Azure subscriptions

B Virtual networks

C Public IP addresses on VMs

D Storage accounts

Azure Bastion allows secure VM access without assigning public IP addresses to the VMs.

Which subnet name is required for deploying Azure Bastion?

A AzureBastionSubnet

B BastionSubnet

C GatewaySubnet

D ManagementSubnet

Azure Bastion requires a subnet named 'AzureBastionSubnet' with a minimum /27 address space.

Which protocols does Azure Bastion support for VM connections?

A FTP and HTTP

B RDP and SSH

C SMTP and POP3

D Telnet and SNMP

Azure Bastion supports RDP for Windows VMs and SSH for Linux VMs.

How does Azure Bastion protect VMs from port scanning attacks?

A By providing access only through the Azure portal over SSL

B By blocking all inbound traffic

C By disabling RDP and SSH protocols

D By using VPN tunnels only

Azure Bastion provides RDP/SSH access over SSL through the Azure portal, hiding VMs from direct exposure.

To connect to VMs in different virtual networks using Azure Bastion, what must be configured?

A Nothing, it works automatically

B Azure Firewall

C Public IP addresses on VMs

D Virtual network peering or VPN connections

Azure Bastion requires virtual network peering or VPN connections to access VMs across different virtual networks.

Explain how Azure Bastion provides secure access to virtual machines without exposing them to the internet.

Think about how Azure Bastion acts as a bridge inside the virtual network.

Describe the steps needed to deploy Azure Bastion in an Azure virtual network.

Focus on subnet creation and Bastion host deployment.