AZ-700 Question 18
Select 3Contoso owns a public IP address range allocated by a regional internet registry (RIR). They plan to host a new cloud-based service in Azure and want to bring these IP addresses into their Azure subscription as a custom public IP address prefix. Which of the following steps must they include to successfully onboard their existing IP range into Azure?
- A
Submit a Letter of Authorization (LOA) from the IP prefix owner to Microsoft for validation
- B
Configure a site-to-site VPN Gateway in Azure that automatically imports the prefix upon completion of the connection
- C
Wait for Microsoft to complete route validation after you prove ownership of the IP range
- D
Directly assign the prefix to multiple Azure regions in a single step without any validation requirement
- E
Create the custom public IP prefix resource in Azure once ownership is validated
Show answer and explanation
Correct answers: A, C, E
Explanation
To bring your own IP address prefix (BYOIP) into Azure, you must first prove you own the prefix by providing an LOA from the official IP prefix owner. After that, Microsoft performs routing and ownership validations. Once these steps are completed, you can create the custom public IP resource in your subscription. For more details and best practices, refer to the official Azure documentation on custom public IP address prefixes.
- A. Correct.
Correct. As part of the bring-your-own-IP (BYOIP) process, you must provide a legally verifiable Letter of Authorization (LOA) proving that you own or are authorized to use the IP range.
- B. Incorrect.
Incorrect. Simply configuring a site-to-site VPN does not onboard an IP range as a custom public IP prefix. BYOIP requires a specific Azure onboarding process, including verification beyond a VPN setup.
- C. Correct.
Correct. Azure will perform route validation after you prove ownership. This ensures that the IP addresses are legitimately under your control and can be routed appropriately.
- D. Incorrect.
Incorrect. You cannot assign the prefix across multiple Azure regions in a single step without validation. Each custom public IP prefix undergoes region selection, and Azure requires validation before the prefix can be used.
- E. Correct.
Correct. Once the ownership validation and routing checks are complete, creating the custom public IP prefix resource is the final step to start using your IP addresses in Azure.