Bastion Host (Jump Box)
A bastion host is a hardened server used as a controlled entry point for admin access.
Updated: 2026-03-06
Definition
A bastion host (jump box) provides a single controlled point to access internal systems.
It is heavily hardened and monitored to reduce exposure of internal admin interfaces.
Key points
- Controlled admin entry point
- Hardened + monitored
- Often paired with MFA and logging
Common mistakes
- Allowing broad access from the bastion to everything.
- Not monitoring sessions and activity.
Related exams
CompTIA Security+ (SY0-701)
Free Security+ SY0-701 mini test with focused next steps. Continue in the app for offline packs and detailed explanations.
AWS Certified Solutions Architect – Associate (SAA-C03)
Free SAA-C03 mini test with focused next steps. Continue in the app for offline packs and detailed explanations.
Microsoft Azure Fundamentals (AZ-900)
Free AZ-900 mini test with focused next steps. Continue in the app for offline packs and detailed explanations.
Related terms
Want to practice this in exam-style questions?
Use the mini tests on each exam page, then continue in the app for offline packs and detailed explanations.
Go to exams