Exam AZ-301 topic 17 question 25 discussion

Actual exam question from Microsoft's AZ-301

Question #: 25
Topic #: 17

DRAG DROP -
You have an on-premises network that uses an IP address space of 172.16.0.0/16.
You plan to deploy 25 virtual machines to a new Azure subscription.
You identify the following technical requirements:
✑ All Azure virtual machines must be placed on the same subnet named Subnet1.
✑ All the Azure virtual machines must be able to communicate with all on-premises servers.
The servers must be able to communicate between the on-premises network and Azure by using a site-to-site VPN.

You need to recommend a subnet design that meets the technical requirements.
What should you include in the recommendation? To answer, drag the appropriate network addresses to the correct subnets. Each network address may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:

Show Suggested Answer

Suggested Answer:

by Ekramy_Elnaggar at Jan. 16, 2020, 2:36 p.m.

Comments

Submit Cancel

cyga75

Highly Voted 5 years, 4 months ago

Repeat question...

upvoted 7 times

...

Harkonnen

Most Recent 4 years, 10 months ago

The answer is CORRECT! In order to configure the Gateway subnet, you need to create a subnet in the VNET. This means that we need to pick the network addresses in pairs, meaning that are either the network addresses 172.16 or the ones 192.168. You cannot select the 172.16 because they OVERLAP! if you were to create such configuration. The other IP pair is fine. It creates one subnet for the VMs and another GatewaySubnet, without overlapping.

upvoted 2 times

...

P0d

5 years ago

In a given scenario we have site to site VPN means that there are public pi addresses configured on gateways. So we can use same IP as on-prem.

upvoted 1 times

Harkonnen

4 years, 10 months ago

Potentially you could, just that the pair of addresses given overlap each other and therefore constitute an incorrect solution.

upvoted 1 times

...

P0d

5 years ago

The given Subnet and Gateway Subnet can not be configured together. They are overlapping

upvoted 1 times

P0d

5 years ago

But it's possible if we will configure address space to 192.168.0.0/16

upvoted 1 times

P0d

5 years ago

But also as overlapping condition we can't use the given ip range 172.16.0.0/16 and 172.16.1./28. It's possible only if we configure subnet as 172.16.0.0/24

upvoted 1 times

...

nshine1988

4 years, 10 months ago

They are not overlapping, the third octet is different (i.e., .1 vs .0).

upvoted 2 times

...