You are designing a virtual network named VNet1 with an address space of 10.2.0.0/16. You … — Microsoft Azure Administrator (AZ-104)

You are designing a virtual network named VNet1 with an address space of $10.2.0.0/16$ . You must configure three subnets within VNet1 to meet the following requirements:
- Subnet-App: Must support at least 27 virtual machines.
- A gateway subnet to support an Azure VPN Gateway.
- A subnet to deploy Azure Bastion.

You want to minimize the address space allocated to each subnet by using the maximum prefix length (smallest subnet mask) possible.

Which subnet configuration should you use?

Subnet-App: $10.2.0.0/27$ ; GatewaySubnet: $10.2.0.32/29$ ; AzureBastionSubnet: $10.2.0.64/26$ Answer
B
Subnet-App: $10.2.0.0/27$ ; GatewaySubnet: $10.2.0.32/29$ ; AzureBastionSubnet: $10.2.0.64/27$
C
Subnet-App: $10.2.0.0/27$ ; GatewaySubnet: $10.2.0.32/29$ ; BastionSubnet: $10.2.0.64/26$
D
Subnet-App: $10.2.0.0/27$ ; GatewaySubnet: $10.2.0.32/30$ ; AzureBastionSubnet: $10.2.0.64/26$

Answer

Subnet-App:

10.2.0.0/27

; GatewaySubnet:

10.2.0.32/29

; AzureBastionSubnet:

10.2.0.64/26

The correct configuration allocates

10.2.0.0/27

for Subnet-App, which provides 32 IP addresses (

32 - 5 = 27

usable), satisfying the 27 VM requirement. It uses the correct name GatewaySubnet and the minimum size of

/29

(8 IP addresses, 3 usable) for the VPN gateway. Lastly, it utilizes the correct name AzureBastionSubnet and the minimum size of

/26

(64 IP addresses, 59 usable) for Azure Bastion.

Step-by-Step Solution

Calculate the subnet size required for Subnet-App to host 27 virtual machines.

A /27 subnet mask is required.

Azure reserves 5 IP addresses in every subnet (the first 4 and the last 1). To support 27 hosts, the subnet must have a total capacity of at least

27 + 5 = 32

IP addresses. A /28 subnet provides only 16 addresses (11 usable), whereas a /27 subnet provides 32 addresses (27 usable).

Determine the minimum subnet size and name for the VPN Gateway.

The subnet must be named GatewaySubnet and have a minimum size of /29.

Azure VPN Gateways must be deployed in a subnet named exactly GatewaySubnet. Azure requires this subnet to be at least /29 to function correctly.

Determine the minimum subnet size and name for Azure Bastion.

The subnet must be named AzureBastionSubnet and have a minimum size of /26.

Azure Bastion must be deployed in a dedicated subnet named exactly AzureBastionSubnet. The prefix size must be /26 or larger (/26, /25, etc.) to pass deployment validation.

Key Concept

Azure subnet design rules, host address reservations, and service-specific subnet constraints

Estimated Time:2m 0s

Question

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Topics