Administrators need browser-based management of Windows Server instances without giving each server a public management endpoint. Which approach fits?

1. Assume a DNS alias implements administrative authorization
2. Open unrestricted RDP from the internet on every server
3. Replace management authentication with a shared public link
4. Deploy Windows Admin Center with secured gateway access and permitted management connectivity