Question

Difficulty: EasyConfigure Azure Application Gateway

You are preparing a virtual network in Azure for the deployment of a new Application Gateway instance to distribute incoming web traffic. When preparing the target subnet for the gateway, which rule or constraint must you follow?

  1. The subnet must be dedicated solely to the Application Gateway resources.Answer
  2. B
    The subnet must be named GatewaySubnet to allow routing to the backend.
  3. C
    The subnet must host the backend virtual machines to prevent latency.
  4. D
    The subnet must block all inbound traffic on ports 65200 through 65535 using a Network Security Group.

Answer

The subnet must be dedicated solely to the Application Gateway resources.
The correct answer is that the subnet must be dedicated solely to the Application Gateway resources. Azure requires a dedicated subnet for Application Gateway deployments. You cannot host other resources, such as virtual machines or standard load balancers, in the same subnet.

Step-by-Step Solution

1
Analyze the subnet requirements for deploying an Azure Application Gateway.
Identify that the subnet hosting the Application Gateway cannot contain any other resource types.
Azure enforces this restriction so that the gateway can scale and manage its own internal infrastructure within the subnet without resource contention.
2
Evaluate the naming and routing requirements.
Determine that while the subnet requires an appropriate size (typically /26 or larger), it does not have a naming restriction like 'GatewaySubnet', and backend hosts must be placed elsewhere.
Using reserved names like 'GatewaySubnet' will conflict with virtual network gateways, and mixing backend VMs with the gateway violates isolation rules.

Key Concept

Subnet requirements for Azure Application Gateway
Estimated Time:45s
Rate this question