Microsoft Exam AZ-204 Topic 6 Question 60 Discussion

You are designing a multi-tiered application that will be hosted on Azure virtual machines. The virtual machines will run Windows Server. Front-end servers will be accessible from the Internet over port 443. The other servers will NOT be directly accessible over the internet

You need to recommend a solution to manage the virtual machines that meets the following requirement

* Allows the virtual machine to be administered by using Remote Desktop.

* Minimizes the exposure of the virtual machines on the Internet Which Azure service should you recommend?