An administrator is preparing to deploy Azure Bastion to secure administrative access to virtual machines in a virtual network named `TransitHub-VNet`. The virtual network has an address space of .
Which of the following configuration settings must be applied to ensure a successful deployment and operation of the Azure Bastion host? (Select TWO)
- A subnet named AzureBastionSubnet with an address prefix of at least /26.Cevap
- An inbound security rule in the Network Security Group (NSG) associated with the Bastion subnet that allows HTTPS traffic on port 443 from the GatewayManager service tag.Cevap
- CA subnet named BastionSubnet with an address prefix of at least /27.
- DAn outbound security rule in the Network Security Group (NSG) associated with the Bastion subnet that denies all outbound traffic to the Internet service tag.
Cevap
To configure Azure Bastion, the subnet must be named exactly AzureBastionSubnet with a prefix of /26 or larger, and the associated Network Security Group (NSG) must allow inbound traffic on port 443 from the GatewayManager service tag.
The correct settings require creating a subnet named exactly AzureBastionSubnet with an address prefix of at least /26, and configuring the Network Security Group (NSG) to allow inbound traffic on port 443 from the GatewayManager service tag. The subnet naming and size are hard requirements for provisioning. Additionally, Gateway Manager communication is necessary for Bastion control plane operations.
Adım Adım Çözüm
Anahtar Kavram
Deploying Azure Bastion requires a dedicated subnet named AzureBastionSubnet (minimum /26 size) and specific NSG rules, including inbound traffic on port 443 from the GatewayManager service tag and outbound traffic to the Internet for health monitoring and diagnostics.