Exam AZ-300 All Questions

View all questions & answers for the AZ-300 exam

Exam AZ-300 topic 1 question 3 discussion

Actual exam question from Microsoft's AZ-300

Question #: 3
Topic #: 1

You have two subscriptions named Subscription1 and Subscription2. Each subscription is associated to a different Azure AD tenant.
Subscription1 contains a virtual network named VNet1. VNet1 contains an Azure virtual machine named VM1 and has an IP address space of 10.0.0.0/16.
Subscription2 contains a virtual network named VNet2. Vnet2 contains an Azure virtual machine named VM2 and has an IP address space of 10.10.0.0/24.
You need to connect VNet1 to VNet2.
What should you do first?

A. Modify the IP address space of VNet2.
B. Move VM1 to Subscription2.
C. Provision virtual network gateways.
D. Move VNet1 to Subscription2.

Show Suggested Answer

Suggested Answer: C 🗳️

by tubadc at Dec. 10, 2019, 2:47 a.m.

Comments

Submit Cancel

tubadc

Highly Voted 5 years, 6 months ago

C - https://azure.microsoft.com/en-us/blog/vnet-peering-and-vpn-gateways/

upvoted 13 times

cacasodo

5 years, 1 month ago

This is the actual statement from Microsoft that tells us VPN Gateways can be used for VNET connections across AAD tenants: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-resource-manager-portal#can-i-establish-a-vnet-to-vnet-connection-across-azure-active-directory-aad-tenants

upvoted 4 times

tartar

4 years, 10 months ago

C is ok

upvoted 1 times

...

starnb

Highly Voted 5 years, 3 months ago

C is the answer because the IP range isn't overlapping and Vnet Gateways provide connectivity across subscriptions associated with different Tenants. There is no need to move VMs in this case.

upvoted 10 times

...

KenZx

Most Recent 4 years, 7 months ago

C is incorrect because Vnet 2 only has one address space /24, note that we need to create gateway subnet ==> So A is correct

upvoted 1 times

arunpaul

4 years, 4 months ago

Subnet address Netmask Range of addresses Useable IPs Hosts 10.0.0.0/25 255.255.255.128 10.0.0.0 - 10.0.0.127 10.0.0.1 - 10.0.0.126 126 10.0.0.128/26 255.255.255.192 10.0.0.128 - 10.0.0.191 10.0.0.129 - 10.0.0.190 62 10.0.0.192/27 255.255.255.224 10.0.0.192 - 10.0.0.223 10.0.0.193 - 10.0.0.222 30 10.0.0.224/28 255.255.255.240 10.0.0.224 - 10.0.0.239 10.0.0.225 - 10.0.0.238 14 10.0.0.240/28 255.255.255.240 10.0.0.240 - 10.0.0.255 10.0.0.241 - 10.0.0.254 14

upvoted 1 times

...

arunpaul

4 years, 4 months ago

You can create so many subsets even with the addressspace 10.0.0.0/24. So the Gateway subnet can be anything like 10.0.0.240/28. And tested in lab and its possible to create GatewaySubnet with this address range. Didnt check it between subscriptions; but its really possible to create a Vnet-Vnet VPN connection between two Vnets and hence the less intensive admin resolution is to create a VPN and ans is C

upvoted 1 times

...

MMohammad

4 years, 9 months ago

The correct answer is: C. Provision virtual network gateways.

upvoted 1 times

...

5 years, 2 months ago

VNet Peering is the best option, but based on the options, they can be connected through gateways.

upvoted 5 times

...

Srini300

5 years, 5 months ago

isn't it an overlapping Vnets situation ? I think we have to re address Vnet2.

upvoted 4 times

SilentH

5 years, 5 months ago

No because 10.0.0.0/16 is a different address space than 10.10.0.0/24. The /16 uses the first two octects of a subnet therefore 10.0.x.x is different than 10.10.x.x.

upvoted 10 times