An administrator plans to deploy a single Azure Application Gateway v2 instance to distribute web traffic to a backend pool of virtual machines. Which two of the following configuration actions must be performed on the subnet hosting the Application Gateway to support this deployment?
- Provision the Application Gateway within a dedicated subnet that contains no other resources.Cevap
- Configure an inbound security rule in the subnet's Network Security Group (NSG) to allow traffic from the GatewayManager service tag on destination ports 65200-65535.Cevap
- CDeploy the Application Gateway in the same subnet as the backend virtual machines to optimize internal routing latency.
- DAdd an inbound security rule in the subnet's Network Security Group (NSG) that blocks all traffic from the GatewayManager service tag to secure the gateway.
Cevap
Provision the Application Gateway within a dedicated subnet containing no other resources, and configure an inbound security rule in the subnet's Network Security Group (NSG) to allow traffic from the GatewayManager service tag on destination ports 65200-65535.
Azure Application Gateway v2 mandates deployment into a dedicated subnet that contains no other resource types (except other application gateways). Additionally, it requires that the Network Security Group (NSG) associated with this subnet allows inbound traffic from the GatewayManager service tag on ports 65200-65535 for infrastructure health and management communication.
Adım Adım Çözüm
Anahtar Kavram
Azure Application Gateway Subnet and NSG configuration requirements
Tahmini Süre:1m 30s