Correct Answer:

Reference: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview

Correct Answer:

Box 1: 3 Subnets

*

One subnet for the three VMs

Virtual network and subnets

A subnet is a range of IP addresses in the virtual network. You can divide a virtual network into multiple subnets for organization and security. Each NIC in a VM is connected to one subnet in one virtual network. NICs connected to subnets

(same or different) within a virtual network can communicate with each other without any extra configuration.

*

One gateway subnet for the incoming VPN connection.

About the gateway subnet

The virtual network gateway uses specific subnet called the gateway subnet. The gateway subnet is part of the virtual network IP address range that you specify when configuring your virtual network. It contains the IP addresses that the

virtual network gateway resources and services use. The subnet must be named 'GatewaySubnet' in order for Azure to deploy the gateway resources.

*

One subnet for the two container groups

To deploy to a new virtual network and have Azure create the network resources for you automatically, specify the following when you execute az container create:

Virtual network name

Virtual network address prefix in CIDR format

Subnet name

Subnet address prefix in CIDR format

Once you've deployed your first container group with this method, you can deploy to the same subnet by specifying the virtual network and subnet names, or the network profile that Azure automatically creates for you. Because Azure

delegates the subnet to Azure Container Instances, you can deploy only container groups to the subnet.

Note:

Contoso has the following virtual network requirements:

Create a virtual network named Vnet6 in West US that will contain the following resources and configurations:

Two container groups that connect to Vnet6

Three virtual machines that connect to Vnet6

Allow VPN connections to be established to Vnet6

Allow the resources in Vnet6 to access KeyVault1, DB1, and Vnet1 over the Microsoft backbone network.

Box 2: 2

*

One Service Endpoint for the Azure KeyVault KeyVault1.

The virtual network service endpoints for Azure Key Vault allow you to restrict access to a specified virtual network.

*

One Service Endpoint for the Azure SQL Database DB1.

Service endpoints are a networking feature in Azure designed to help you better identify traffic coming into your Azure SQL Database as originating from one or more of your VNets.

Note: Service endpoints are a networking feature in Azure designed to help you better identify traffic coming into your Azure SQL Database as originating from one or more of your VNets.

Service endpoints are available for the following Azure services and regions.

Azure SQL Database

Azure Key Vault

Etc.

Reference: https://learn.microsoft.com/en-us/azure/virtual-network/network-overview

https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-create-site-to-site-rm-powershell

https://learn.microsoft.com/en-us/azure/container-instances/container-instances-vnet

https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview

https://learn.microsoft.com/en-us/azure/key-vault/general/overview-vnet-service-endpoints

Correct Answer: CD

Reference: https://docs.microsoft.com/en-us/azure/private-link/private-endpoint-dns#on-premises-workloads-using-a-dns-forwarder https://azure.microsoft.com/en-gb/blog/new-enhanced-dns-features-in-azure-firewall-now-generally-available/

Correct Answer: B

Correct Answer: A

You can create a virtual network before you create a virtual machine or you can create the virtual network as you create a virtual machine.

You create these resources to support communication with a virtual machine:

Network interfaces

IP addresses

Virtual network and subnets

Create a virtual network

Step 1: Select Create a resource in the upper left-hand corner of the portal.

Step 2: In the search box, enter Virtual Network. Select Virtual Network in the search results.

Step 3: In the Virtual Network page, select Create.

Step 4: In Create virtual network, enter or select this information in the Basics tab:

Step 5: Enter Region: France Central

Step 6: Select the IP Addresses tab, or select the Next: IP Addresses button at the bottom of the page and enter in the following information then select Add:

Step 7: For IPv4 address space enter: 10.5.1.0/16

Step 8: Click Add subnet

Step 9: For Subnet address range Enter 10.5.1.0/24.

Step 10: Finish the wizard.

Reference:

https://learn.microsoft.com/en-us/azure/virtual-network/quick-create-portal