Exam AZ-700 topic 2 question 59 discussion

Actual exam question from Microsoft's AZ-700

Question #: 59
Topic #: 2

HOTSPOT
-

You have an Azure subscription that contain a storage account named st1 in the East US Azure region.

You have the virtual networks shown in the following table.

You have the subnets shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by Acaer at Sept. 7, 2023, 7:53 p.m.

Comments

Submit Cancel

Acaer

Highly Voted 1 year, 9 months ago

NYN 1.N Azure Bastion requires a dedicated subnet: AzureBastionSubnet. You must create this subnet in the same virtual network that you want to deploy Azure Bastion to. The subnet must have the following configuration: Subnet name must be AzureBastionSubnet. Subnet size must be /26 or larger. https://learn.microsoft.com/en-us/azure/bastion/configuration-settings#subnet 2.Y With /25 we have more than 100 IP's left to use. Should not be a problem to deploy 100 additional VM's with a single IP. 3.N You can not change the IP address range of subnet3-1 range to 10.3.1.0/16. Azure will give this error '10.3.1.0/16 is not a valid CIDR block' because its higher than the Vnet's IP address space of 10.3.0.0/16

upvoted 26 times

goooru

1 year, 8 months ago

correct

upvoted 1 times

...

Aydin

Most Recent 1 year, 2 months ago

N - Az Bastion service require a dedicated subnet for deploying Y - in /25 has 128 ip address, and azure use 5 ip address for its purpose and you can create additional VMs N - Because CIDR range of VNet is 10.3.0.0/16 , firstly you should remove VNet Cidr space N

upvoted 1 times

...

Lazylinux

1 year, 7 months ago

NYN 1-N as per https://learn.microsoft.com/en-us/azure/bastion/configuration-settings 2-Y 2/power of 7 = 128 take 10 away 5 reserved and 5VMS =118 hence can take 100 more 3- N 10.3.1.0/16 is INVALID CIDR

upvoted 1 times

...

Yodao

1 year, 8 months ago

what's the correct answer?

upvoted 1 times

...

KeenOnTech

1 year, 9 months ago

1. Y: AzureBastionSubnet should be /26 which falls within Subnet1-1 i.e. /24. There we can fit in AzureBastionSubnet /26 + 5x VMs /32 within Subnet1-1 /24 2. Y: 100 VMs easily fit within Subnet2-1 /25 3. Y: 10.3.1.0/16 is smaller than 10.3.0.0/16 and so can fit within VNet3.

upvoted 3 times

JackeD

1 year, 8 months ago

except 2, this is wrong. 1. you can change the subnet, and readjust everything but thats not what the question is asking. 2. 10.3.1.0/16 isnt a real subnet, a /16 confines the subnet to the first two octets. Please do not answer if you do not know, this is practice and no points are awarded.

upvoted 6 times

sam881989

1 year, 5 months ago

You can't change the subnet address without removing the resources from it and each subnets already have 5 VM with the IPs in it.

upvoted 1 times

...