You are designing a multi$-$tiered application that will be hosted on Azure virtual machines. The virtual machines will run Windows Server. Front$-$end servers will be accessible from the Internet over port $443.$ The other servers will NOT be directly accessible over the Internet.

You need to recommend a solution to manage the virtual machines that meets the following requirement:

Allows the virtual machine to be administered by using Remote Desktop.

Minimizes the exposure of the virtual machines on the Internet.

Which Azure service should you recommend?

Select only one answer.

Azure Bastion

Azure Front Door

Azure Private Link

Service Endpoint