Lab Overview

In this lab, you will learn how to manually deploy and configure Azure Bastion to securely connect to a virtual machine in a virtual network without exposing the machine to the public internet.

Azure Bastion provides secure and seamless RDP/SSH connectivity to your VMs directly from the Azure portal over SSL, without requiring a public IP address on the virtual machine.

Throughout the lab, you will deploy a Bastion service, configure it to work with an existing virtual network, and test your configuration by securely connecting to a virtual machine.

Learning Objectives

• •  Gain a clear understanding of what Azure Bastion is, how it works, and why it is essential for secure access to virtual machines in Azure.
  • Learn how to manually deploy the Azure Bastion service within a specific resource group and virtual network in the Azure portal.
  • Explore the configuration options available during the deployment, including performance tier selection and virtual network association.
  • Practice establishing a secure RDP connection to a virtual machine without using a public IP address, ensuring that your VM remains protected from direct exposure to the internet.

Exam Relevance

The skills you learn in this lab are necessary to pass the following Azure certification exams:

• • AZ-104
  • AZ-305
  • AZ-700