Question

Difficulty: MediumConfigure Azure Bastion

An organization is designing a disaster recovery virtual network named `DR-VNet` with an address space of 172.16.0.0/16172.16.0.0/16. To allow administrators to securely connect to recovery virtual machines, the organization plans to deploy an Azure Bastion host. The administrator needs to create the dedicated subnet for Azure Bastion.

Which configuration must the administrator use for the new subnet?

  1. A
    Subnet name: AzureBastionSubnet; Address space: 172.16.3.0/28172.16.3.0/28
  2. B
    Subnet name: BastionSubnet; Address space: 172.16.3.0/26172.16.3.0/26
  3. C
    Subnet name: AzureBastionSubnet; Address space: 172.16.3.0/27172.16.3.0/27
  4. Subnet name: AzureBastionSubnet; Address space: 172.16.3.0/26172.16.3.0/26Answer

Answer

Subnet name: AzureBastionSubnet; Address space: 172.16.3.0/26172.16.3.0/26
The correct configuration uses the required name 'AzureBastionSubnet' and has an address block of 172.16.3.0/26172.16.3.0/26. This meets the mandatory platform constraints: the subnet name must match exactly, and the prefix must be /26/26 or larger (providing at least 64 addresses) to host the Azure Bastion resources.

Step-by-Step Solution

1
Identify the mandatory subnet name constraint for Azure Bastion.
The dedicated subnet must be named exactly 'AzureBastionSubnet'.
Azure Bastion uses this specific name to bind the service to the network resource.
2
Identify the minimum subnet address block size constraint for Azure Bastion.
The subnet prefix must be /26/26 or larger (e.g., /26/26, /25/25, /24/24).
A minimum prefix of /26/26 provides 64 IP addresses, ensuring enough IP addresses are available for internal scaling and instance management.
3
Filter the options to find the configuration that meets both criteria.
The configuration with the subnet name 'AzureBastionSubnet' and the address block 172.16.3.0/26172.16.3.0/26 is selected.
It satisfies both the strict naming and minimum /26/26 sizing requirements.

Key Concept

Azure Bastion dedicated subnet naming and prefix size requirements
Estimated Time:1m 30s
Rate this question