Administering Windows Server Hybrid Core Infrastructure (AZ-800) Practice

Disable ads (and more) with a membership for a one time $2.99 payment

Prepare for the AZ-800 exam with our comprehensive study resources. Utilize flashcards and multiple-choice questions with hints and explanations. Gain confidence and excel in your certification journey!

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.


What must an administrator do to properly implement Azure Bastion?

  1. Install the bastion host in a separate VNet from the VMs

  2. Configure an NSG for the bastion host

  3. Connect Azure Bastion to the subnet named AzureBastionSubnet

  4. All of the above

The correct answer is: Connect Azure Bastion to the subnet named AzureBastionSubnet

Implementing Azure Bastion correctly involves ensuring that it is connected to a specific subnet designed for its operation, which is called AzureBastionSubnet. This subnet is specifically reserved for Azure Bastion within the Azure virtual network and must be at least /27 in address space. The proper implementation includes the Azure Bastion service being able to route traffic through this subnet to reach the destination virtual machines securely. Connecting Azure Bastion to this designated subnet is critical because the service requires this specific structure in the Azure networking framework to function properly and to maintain secure access to the virtual machines without exposing them to the public internet directly. The other options listed contribute to a broader understanding of networking best practices but do not hold the same level of necessity as configuring the appropriate subnet for Azure Bastion.