A security audit reveals that Azure VMs in your environment have public IP addresses with RDP port 3389 open to the internet in their NSGs. You need to provide emergency access for administrators while eliminating the persistent exposure. What is the recommended solution?

Question

Sunny · Accepted Answer

Remove public IPs and use Azure Bastion for browser-based RDP/SSH access without exposing ports. Azure Bastion provides browser-based RDP and SSH access to VMs directly from the Azure portal, with no need for public IPs or open management ports on VMs. All communication is over SSL (443). This eliminates the attack surface entirely. IP restrictions still leave ports open to scanning; non-standard ports are security through obscurity only.

A security audit reveals that Azure VMs in your environment have public IP addresses with RDP port 3389 open to the internet in their NSGs. You need to provide emergency access for administrators while eliminating the persistent exposure. What is the recommended solution?

A security audit reveals that Azure VMs in your environment have public IP addresses with RDP port 3389 open to the internet in their NSGs. You need to provide emergency access for administrators while eliminating the persistent exposure. What is the recommended solution?

📚 What This Question Tests

More VM Security Practice Questions