Examkin

Question

Difficulty: MediumCreate and Configure Virtual Networks and Subnets

Your company is planning to deploy Azure Bastion inside a virtual network named `VNet-Core`, which has an address space of 10.240.0.0/1610.240.0.0/16. An administrator proposes the following candidate subnets to host the Bastion service:

Proposed Subnet NameAddress RangePurpose
`Bastion-Subnet`10.240.10.0/2610.240.10.0/26Azure Bastion
`AzureBastionSubnet`10.240.20.0/2710.240.20.0/27Azure Bastion
`AzureBastionSubnet`10.240.30.0/2610.240.30.0/26Azure Bastion
`BastionSubnet`10.240.40.0/2810.240.40.0/28Azure Bastion

Which of the proposed subnets in the table is configured correctly to support the Azure Bastion deployment?

  1. A
    The subnet named `AzureBastionSubnet` with the address range 10.240.20.0/2710.240.20.0/27
  2. The subnet named `AzureBastionSubnet` with the address range 10.240.30.0/2610.240.30.0/26Answer
  3. C
    The subnet named `BastionSubnet` with the address range 10.240.40.0/2810.240.40.0/28
  4. D
    The subnet named `Bastion-Subnet` with the address range 10.240.10.0/2610.240.10.0/26

Answer

The subnet named `AzureBastionSubnet` with the address range 10.240.30.0/2610.240.30.0/26
The subnet named `AzureBastionSubnet` with the address range 10.240.30.0/2610.240.30.0/26 is correct because Azure Bastion requires a dedicated subnet named exactly `AzureBastionSubnet` with a subnet mask of /26/26 or larger.

Step-by-Step Solution

1
Check naming requirements for Azure Bastion subnets
The subnet hosting the Azure Bastion service must be named exactly `AzureBastionSubnet`.
Azure uses the specific name `AzureBastionSubnet` to provision and bind the Bastion resources automatically.
2
Check size requirements for Azure Bastion subnets
The subnet prefix size must be /26/26 or larger (e.g., /26/26, /25/25, /24/24).
Azure Bastion requires a minimum space of /26/26 to accommodate scale instances and manage network addresses.
3
Filter candidate subnets based on name and prefix constraints
Only the subnet named `AzureBastionSubnet` with the address range 10.240.30.0/2610.240.30.0/26 meets both the naming convention and the size requirement.
Other candidates either use incorrect names (such as `Bastion-Subnet` or `BastionSubnet`) or prefixes that are too small (such as /27/27 or /28/28).

Key Concept

Azure Bastion subnet configuration requirements (naming and minimum size)
Estimated Time:1m 30s
Rate this question

Topics

Create and Configure Virtual Networks and Subnets