A cloud architect is designing a hybrid network architecture in Azure to support a multi-t… — Microsoft Azure Administrator (AZ-104)

A cloud architect is designing a hybrid network architecture in Azure to support a multi-tier web application and secure administrative access. The virtual network, named `vnet-corporate`, is allocated the address block $172.16.0.0/21$ . The architect defines the following subnets:

- `subnet-web`: $172.16.1.0/24$
- `subnet-db`: $172.16.2.0/23$

To provide secure RDP and SSH access to the virtual machines without exposing public IP addresses, the architect plans to deploy Azure Bastion using the Basic SKU. They propose creating a new subnet named `AzureBastionSubnet` with the address prefix $172.16.4.0/27$ .

Statement: The proposed configuration is sufficient to successfully deploy the Azure Bastion host.

Cevap: Cevap

Cevap

The statement is false.

The proposed configuration is invalid because the Azure Bastion host requires a subnet with a prefix size of at least `/26`. The proposed prefix size of `/27` is too small, causing the deployment to fail.

Adım Adım Çözüm

Determine the IP range of the virtual network `vnet-corporate` using its CIDR prefix.

The address block

172.16.0.0/21

spans from

172.16.0.0

172.16.7.255

This establishes the outer boundaries for all subnet IP ranges.

Verify if the proposed subnets fit within the virtual network boundaries without overlapping.

`subnet-web` (

172.16.1.0/24

172.16.1.0

172.16.1.255

), `subnet-db` (

172.16.2.0/23

172.16.2.0

172.16.3.255

), and `AzureBastionSubnet` (

172.16.4.0/27

172.16.4.0

172.16.4.31

) are all valid, non-overlapping subsets of the

172.16.0.0/21

address space.

To confirm that the IP allocation itself is mathematically valid and contained.

Check the deployment requirements for the Azure Bastion service.

Azure Bastion requires a subnet named `AzureBastionSubnet` with a minimum prefix size of `/26` (which provides 64 IP addresses).

To verify if the proposed `/27` prefix size (providing only 32 IP addresses) meets the service requirements.

Anahtar Kavram

Azure Bastion Subnet Constraints

Soru

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Konular