AZ-700 Question 15
Single answerYour company plans to deploy a set of web services in Azure that must use public endpoints from a contiguous IP address range for easy partner whitelisting. Additionally, the solution must allow adding new public endpoints without requiring partner organizations to frequently update their firewall rules. Which Azure feature should you implement to meet these requirements?
- A
Assign a standard static public IP address for each individual web service
- B
Obtain a public IP address prefix and allocate addresses from that prefix to each web service
- C
Implement Azure Application Gateway with auto-scaling public IP addresses
- D
Use Azure NAT Gateway with ephemeral outbound IP addresses
Show answer and explanation
Correct answer: B
Explanation
A public IP address prefix in Azure provides a contiguous block of IP addresses that can be assigned to Azure resources individually. This is ideal for scenarios where partner organizations require easy firewall whitelisting of a single IP range. Refer to Microsoft� official documentation on public IP address prefixes for additional guidance: https://learn.microsoft.com/azure/virtual-network/public-ip-address-prefix.
- A. Incorrect.
Option 1: Assigning a static public IP address to each web service individually does provide stable IPs, but those addresses may not form a single contiguous range. This makes whitelisting more cumbersome for partner organizations.
- B. Correct.
Option 2: Obtaining a public IP address prefix ensures you receive a contiguous block of IP addresses. You can allocate IPs from that prefix to each web service, simplifying partner whitelisting and supporting future expansions without requiring new ranges.
- C. Incorrect.
Option 3: While Azure Application Gateway can handle inbound traffic and scale automatically, its public IP addresses do not guarantee a contiguous range. Also, under certain scaling operations, the IP may be reassigned, defeating the requirement for a stable, contiguous range.
- D. Incorrect.
Option 4: Azure NAT Gateway with ephemeral IP addresses focuses on outbound traffic and these addresses can change, which does not fulfill the requirement for consistent, contiguous inbound addresses.