You are designing a multi$-$tiered application that will be hosted on Azure virtual machines. The virtual machines will run Windows Server. Front$-$end servers will be accessible from the Internet over port $443.$ The other servers will NOT be directly accessible over the Internet.

You need to recommend a solution to manage the virtual machines that meets the following requirement:

Allows the virtual machine to be administered by using Remote Desktop.

Minimizes the exposure of the virtual machines on the Internet.

Which Azure service should you recommend?