Question

Difficulty: EasyConfigure Azure Bastion

Your company is deploying application servers in a new Azure virtual network named CorpVNet. You need to configure Azure Bastion in CorpVNet to enable secure RDP and SSH connections to the virtual machines. Which subnet configuration meets the requirements for the Azure Bastion deployment?

  1. A
    A subnet named BastionSubnet with an address space prefix of /26
  2. B
    A subnet named AzureBastionSubnet with an address space prefix of /27
  3. A subnet named AzureBastionSubnet with an address space prefix of /26Answer
  4. D
    A subnet named BastionSubnet with an address space prefix of /24

Answer

A subnet named AzureBastionSubnet with an address space prefix of /26
Azure Bastion requires a dedicated subnet named exactly AzureBastionSubnet. The subnet must have a prefix size of /26 or larger (such as /25 or /24) to support scale-out operations and management traffic.

Step-by-Step Solution

1
Identify the mandatory subnet name required for Azure Bastion deployment.
The subnet name must be exactly AzureBastionSubnet.
Azure Bastion only recognizes and deploys into a subnet with this specific name.
2
Determine the minimum address space prefix requirement for the Bastion subnet.
The subnet prefix must be /26 or larger.
Azure Bastion requires at least a /26 subnet to support scale-out and underlying infrastructure management.

Key Concept

Azure Bastion subnet requirements (exact naming and minimum subnet size)
Rate this question