Administrators need browser-based RDP or SSH to Azure VMs without exposing those VMs with public IP addresses. Which service should they evaluate?

1. Azure Advisor
2. Azure DNS alone
3. Azure Bastion
4. Azure Blob Storage