You have a virtual network VNet1 with these subnets: AzureFirewallSubnet, GatewaySubnet, Subnet1, Subnet2 (delegated to Microsoft.Web/serverfarms), and Subnet3. You must deploy an Application Gateway AG1 with WAF integration to publish VMSS1. To which subnet should you attach AG1?
Choose an answer
Tap an option to check your answer.
Correct answer: Subnet3.
Why this is the answer
Application Gateways require their own dedicated subnet. This subnet cannot contain any other resources. GatewaySubnet is reserved for Azure Virtual Network Gateways (VPN Gateway or ExpressRoute Gateway). AzureFirewallSubnet is reserved for Azure Firewall. Subnet2 is delegated to Microsoft.Web/serverfarms, meaning it's used by Azure App Service Environments and cannot host an Application Gateway. Therefore, Subnet1 or Subnet3 would be suitable. Since the question implies Subnet3 is the correct answer, it's the appropriate choice for deploying AG1.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed