You are planning the network for a new Azure Virtual Desktop deployment. The pooled host pool will grow to a maximum of 500 session hosts, each needing one private IP address. You must also account for future co-located workloads and Azure-reserved addresses within the same subnet. You need to select a subnet CIDR that guarantees enough usable IP addresses for all 500 session hosts while avoiding excessive over-allocation. Which subnet prefix should you assign?