SY0-701: CompTIA Security+

A bastion host is a hardened, controlled entry point for administrative access to private resources. It centralizes management connections and limits inbound access through the security boundary to the bastion rather than allowing direct administrative traffic to each internal system.