Private admin subnets hold management interfaces with no direct public IPs. How should engineers reach those hosts?
Select an answer to reveal the explanation.
Short Explanation
A bastion is the locked lobby before the private offices. Admins land on the hardened jump host first, then hop inside—no public IPs sprayed onto every management NIC.
Full Explanation
A bastion or jump host is a hardened intermediary that provides the sole (or primary) administrative ingress to private subnets. It concentrates controls such as MFA, allowlists, and session logging. Giving every admin interface a public IP or bridging to untrusted networks defeats segmentation.