nerdexam
Microsoft

AZ-700 · Question #390

You have an Azure subscription. You plan to deploy an app named App1 that will be accessed by using Azure Application Gateway. You need to deploy the application gateway for App1. What should you…

The correct answer is B. a subnet. Azure Application Gateway requires a dedicated subnet within a virtual network before it can be deployed - no other resource can share that subnet. This subnet must exist and be sized appropriately (Microsoft recommends /24 or at least /26) prior to gateway provisioning. A…

Submitted by ashley.k· Apr 18, 2026

Question

You have an Azure subscription. You plan to deploy an app named App1 that will be accessed by using Azure Application Gateway. You need to deploy the application gateway for App1. What should you create first?

Options

  • Aa user-assigned managed identity
  • Ba subnet
  • Can X.509 certificate
  • Dan Azure Web Application Firewall (WAF) policy

How the community answered

(56 responses)
  • A
    4% (2)
  • B
    82% (46)
  • C
    9% (5)
  • D
    5% (3)

Explanation

Azure Application Gateway requires a dedicated subnet within a virtual network before it can be deployed - no other resource can share that subnet. This subnet must exist and be sized appropriately (Microsoft recommends /24 or at least /26) prior to gateway provisioning. A user-assigned managed identity is only needed when integrating with Azure Key Vault for SSL certificate management (not always required). An X.509 certificate is needed for HTTPS listeners but is not a prerequisite for the gateway resource itself. A WAF policy is optional and can be attached after deployment. The subnet is the mandatory first dependency.

Community Discussion

No community discussion yet for this question.

Full AZ-700 Practice