[&] Which of the following access methods are supported by a bastion host? (select all that apply)
- Direct remote desktop client connection via port 443 to an Azure Windows Server
- Direct remote desktop client connection via port 3389 to an Azure Windows Server
- Browser-based secure ssh connection to a Linux server running in Azure -- Correct
- Browser-based secure remote desktop connection to a Windows server running in Azure -- Correct

[&] Which of the following CIDR notations represent a valid IP address range for a bastion subnet? (choose 2)
- 10.0.255.0/24 -- Correct
- 10.0.0.0/26 -- Correct
- 10.0.255.0/16
- 10.0.0.0/28