You create a Virtual Network (VNet) with address space 10.0.0.0/16. You then add two subnets:
- Subnet A: 10.0.1.0/24
- Subnet B: 10.0.1.128/25
What will happen when you try to deploy this configuration?
Think about whether subnet IP ranges can overlap inside a VNet.
Azure does not allow overlapping IP address ranges for subnets within the same VNet. Subnet B's range 10.0.1.128/25 overlaps with Subnet A's 10.0.1.0/24, causing deployment failure.
You create a subnet within a VNet and delegate it to Microsoft.Web/serverFarms (App Service). What is the effect of this delegation?
Consider what subnet delegation means for resource placement.
Subnet delegation reserves the subnet for the specified Azure service, preventing other resource types from being deployed there.
You associate a Network Security Group (NSG) with a subnet inside a VNet. Which of the following statements is true about the NSG's effect?
Think about what resources are affected by NSG rules when applied to a subnet.
When an NSG is associated with a subnet, its rules apply to all network interfaces within that subnet, affecting both inbound and outbound traffic for all attached resources.
Which Azure CLI command correctly creates a subnet named 'backend' with address prefix 10.0.2.0/24 inside an existing VNet 'myVNet' in resource group 'myRG'?
Recall the Azure CLI command structure for subnet creation.
The correct command is az network vnet subnet create with parameters for resource group, VNet name, subnet name, and address prefix.
You are designing a VNet with multiple subnets for a multi-tier application. Which subnet design best follows Azure best practices for high availability and security?
- One subnet for all resources.
- Separate subnets for web, application, and database tiers with NSGs applied per subnet.
- Separate subnets for each VM with no NSGs.
- One subnet per region with all tiers mixed inside.
Think about isolation and control of traffic between tiers.
Separating tiers into different subnets and applying NSGs per subnet allows better control of traffic flow and improves security and availability.