Exam AZ-303 topic 5 question 3 discussion

the answer is correct https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-resource-manager-portal

Incorrect Answers: Modify the IP address space of VNet2 - IP addresses are not overlapping. So, modification to IP range is not required. Move VM1 to Subscription2 - The requirement is to connect VNets. Moving a VM to a different VNet does not provide connectivity between VNets. Move VNet1 to Subscription2 - VNets are logical isolation of cloud resources. Moving VNet1 to the Subscription2 does not provide connectivity between VNets. Also, Subscription2 is in a different Azure AD tenant. Answer is C

Isn't it easier to move the vnets to the same subscription and then create a peering? D could work as well in this case.

virtual network gateways

The GatewaySubnet is recommended to be /27 so even though the address space for vnet2 is only /24 it's big enough to create GatewaySubnet, we don't need to change the address space. https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-gateway-settings#gwsub It's allowed to have VPN gateways connecting subscriptions with different tenants https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-resource-manager-portal So C.

correct answer should be A. IP address is not overlapping, peering is possible even in different tenant/subscription (check peering requirement and constraints: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering#requirements-and-constraints) vpn gateway needs a different subnet which we don't have on vNet2. So change the IP address space then either peering or vpn gateway.

IPs not overlapping; Correct Ans is: C. Provision virtual network gateways.

Configure a VNet-to-VNet VPN gateway connection by using the Azure portal https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-resource-manager-portal C is correct. you can either use peering to connect two vnet, or use network gateway to connect two vnet. this is the case of the question, answer is C

The most logical answer is A. They ask what you should do first. Since vnet peering is not an option, you'd need to modify the address space of the 10.10.0.0/24 network if you're to provision VNGs so that you may add the Subnet GW.

I had this question in the exam that i took on July 14th 2021

Answer is correct. vnet to vnet use VPN GW to connect.

The question tells us the IP address space of the VNETS. It makes no mention of subnets. So we are not required to consider which subnets (gateway or otherwise) are configured. Also, option A is saying you will change the address space, not add a subnet for the gateway, so that does not really make sense. If it said "Create gateway subnets" then I would be more leaning towards it. The given answer is the most logical based on what we are given. You have these address spaces and you need to provision gateways. option c

A Making a peering is not a problem since there is no overlapping between vnet1 and vnet2. So the question implicitly refers to a vnet-to-vnet. We need to create the gateway subnet. Vnet2 is small with only 255 addresses. But there is only one address occupied by one vm. It is possible to divide vnet2 in two subnets: 10.10.0.0/25 10.10.0.128/25 We can put the vm in the first subnet and reserve the second for the gateway subnet.

Answer is A. VNet2 has a range of /24, and has VM connected to it which means there's no more room for creating a GatewaySubnet. You need to add another IP range to VNet2 before you can add a VNG.

The question informs "Different azure tenant" : no overlapping IP address ranges. option C

The given answer is correct considering the other 3 options provided, However - VNET peering would have bee the best solution in this type of scenario. Who is having questions on IP overlapping - please consider the fact that the IP range is not overlapping as the subnets are different

The suggested answer is wrong. See: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-cli#can-i-have-overlapping-address-spaces-for-vnet-to-vnet-configurations The correct answer is modifying the address space of the VNet.