[&] Which of the following statements is true regarding Azure bastion hosts? (choose 1)
- Users can connect to the bastion host via RDP or ssh depending on the VM
- The administrative account on the VM is sufficient to access the VM via a bastion host
- Azure RBAC is sufficient to access a VM via a bastion host
- Azure RBAC and the administrative account on the VM are required to access a VM via a bastion host

[&] How does "just-in-time" virtual machine access work?
- It deletes the rule restricting administrative ports from the NSG assigned to the VM and re-creates the rule after a specified time.
- It activates the bastion host for the network the VM is associated with for a specified time.
- It adds a rule allowing access to administrative ports to the NSG assigned to the VM and removes it after a specified time.
- It creates a public IP address for a virtual machine and deletes it after a specified time.