You need to provide secure RDP access to VMs in your VNet for remote administrators. You deploy Azure Bastion. What networking requirements must be met for Azure Bastion to function correctly?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: You must create a subnet named exactly 'AzureBastionSubnet' with at least a /26 prefix

Azure Bastion requires a dedicated subnet within the Virtual Network named exactly 'AzureBastionSubnet'. The subnet must be at least a /26 in size to accommodate the Bastion scale ...

📋Part of Microsoft Certified: Azure Network Engineer Associate (AZ-700) · Azure Certification Practice
Real Exam ScenarioAzure Bastion

You need to provide secure RDP access to VMs in your VNet for remote administrators. You deploy Azure Bastion. What networking requirements must be met for Azure Bastion to function correctly?

✓ Correct Answer & ExplanationAzure Bastion

Correct Answer

You must create a subnet named exactly 'AzureBastionSubnet' with at least a /26 prefix

Why This Answer Is Correct

Azure Bastion requires a dedicated subnet within the Virtual Network named exactly 'AzureBastionSubnet'. The subnet must be at least a /26 in size to accommodate the Bastion scale sets. Target VMs do not need public IPs, nor do they require any agents to be installed.

📚 What This Question Tests

This question evaluates your knowledge of Azure Bastion — a core concept tested in Microsoft Certified: Azure Network Engineer Associate (AZ-700). Understanding Azure Bastion is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.

All Microsoft Certified: Azure Network Engineer Associate (AZ-700) Questions →Browse All Azure Exams →
← Back to Microsoft Certified: Azure Network Engineer Associate (AZ-700) Full Practice Hub