AZ-700 Question 13
Select 2Your company plans to host several public-facing workloads in Azure and wants to ensure that all public IP addresses used by these workloads come from a contiguous range. You decide to create a Public IP prefix in your subscription. Which of the following statements are correct regarding how to create and use this Public IP prefix?
- A
You can only use a Public IP prefix with Standard SKU public IP addresses under the same region and subscription.
- B
You can resize the Public IP prefix after creation by assigning a larger CIDR block.
- C
Multiple Azure resources, such as VMs and Load Balancers, can obtain IP addresses from the same Public IP prefix.
- D
You must associate the Public IP prefix with a Network Security Group to allocate addresses from it.
Show answer and explanation
Correct answers: A, C
Explanation
When creating a Public IP prefix in Azure, remember that it must be associated with the Standard SKU (not Basic), it cannot be resized after creation, and each address in the prefix can be assigned to a resource in the same subscription and region. Refer to Microsoft� official documentation (https://learn.microsoft.com/azure/virtual-network/ip-services/public-ip-prefix) for the most up-to-date guidelines on planning and using Public IP prefixes.
- A. Correct.
Correct: Azure Public IP prefixes are only supported for Standard SKU public IP addresses in the same region and subscription. This requirement ensures consistent allocation and management of IP addresses within Azure� infrastructure.
- B. Incorrect.
Incorrect: A Public IP prefix cannot be resized after creation. You must specify the correct size (CIDR range) at the time of creation. If you need a larger prefix, you must create a new one.
- C. Correct.
Correct: Once the prefix is created, you can allocate multiple individual public IP addresses (belonging to the prefix range) to different Azure resources such as virtual machines, web apps (with IP-based SSL), load balancers, etc. This allows you to maintain a contiguous set of public IP addresses across different endpoints.
- D. Incorrect.
Incorrect: A Network Security Group (NSG) is used for controlling network traffic via rules, not for IP address allocation. You do not need to associate the Public IP prefix itself with an NSG to allocate addresses.