An organization has an Azure subscription containing a virtual network named `VNet-Prod` (… — Microsoft Azure Administrator (AZ-104)

An organization has an Azure subscription containing a virtual network named `VNet-Prod` ( $192.168.0.0/16$ ) with three subnets:

* `Subnet-A`: $192.168.1.0/24$ , delegated to `Microsoft.Web/serverFarms`
* `Subnet-B`: $192.168.2.0/24$ , delegated to `Microsoft.Sql/managedInstances`
* `Subnet-C`: $192.168.3.0/24$ , which has no subnet delegation

An administrator wants to perform the following deployments:
1. Integrate an Azure App Service Web App with `Subnet-A`.
2. Deploy a new Azure Virtual Machine (`VM-Admin`) into `Subnet-A` to manage the Web App.
3. Deploy an Azure Bastion host into `Subnet-C`.

Based on this scenario, is the statement 'The administrator can successfully complete all three deployments using the existing subnets' true or false?

Cevap: Cevap

Cevap

The statement is false because standard virtual machines cannot be deployed in a delegated subnet, and Azure Bastion must be deployed in a subnet named exactly `AzureBastionSubnet`.

The correct answer is false. Standard virtual machines cannot be deployed into `Subnet-A` because it is delegated to `Microsoft.Web/serverFarms`, which restricts the subnet's resources to App Service integrations. Additionally, Azure Bastion cannot be deployed into `Subnet-C` because it requires a dedicated subnet named exactly `AzureBastionSubnet`.

Adım Adım Çözüm

Evaluate the first deployment: Integrating an Azure App Service Web App with `Subnet-A`.

The integration is successful because `Subnet-A` is delegated to `Microsoft.Web/serverFarms`, which is the correct delegation for App Service regional VNet integration.

Azure App Service VNet integration requires a subnet delegated to `Microsoft.Web/serverFarms`.

Evaluate the second deployment: Deploying a new virtual machine (`VM-Admin`) into `Subnet-A`.

The deployment fails because `Subnet-A` is delegated.

Subnet delegation reserves the subnet exclusively for the delegated service. No other resource types, including standard virtual machines, can be deployed into a delegated subnet.

Evaluate the third deployment: Deploying an Azure Bastion host into `Subnet-C`.

The deployment fails because the subnet name is incorrect.

Azure Bastion requires a dedicated subnet named exactly `AzureBastionSubnet` with a subnet mask of `/26` or larger. It cannot be deployed into `Subnet-C`.

Anahtar Kavram

Subnet delegation constraints and Azure Bastion subnet requirements.

Soru

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Konular