You are preparing a virtual network so that a managed jump service can be deployed into it. The subnet must carry one exact name and must not host other workloads. Which name must you give that subnet?
Show answer and explanation
Answer: D
Azure Bastion must be deployed into a subnet named exactly AzureBastionSubnet, and the name is case-sensitive. The subnet should be dedicated to Bastion with no other resources in it. Azure Firewall uses AzureFirewallSubnet and VPN or ExpressRoute gateways use GatewaySubnet, so those names do not satisfy Bastion's requirement. Choosing any other name blocks the deployment.
Why the other options are wrong
- A. Bastion does not accept the shortened name BastionSubnet. The service requires the Azure-prefixed name AzureBastionSubnet.
- B. AzureFirewallSubnet is the reserved name for Azure Firewall. Placing Bastion in it would conflict with the firewall's own requirement and is not valid.
- C. GatewaySubnet is reserved for VPN or ExpressRoute gateways, so it cannot host a Bastion deployment.