Exam AZ-140 All Questions

View all questions & answers for the AZ-140 exam

Exam AZ-140 topic 2 question 27 discussion

Actual exam question from Microsoft's AZ-140

Question #: 27
Topic #: 2

You have an on-premises network and an Azure subscription. The subscription contains the following virtual network:
* Name:VNet1
* Address space: 10.10.0.0/16
* Subnet name: Subnet1
* Subnet1 address range: 10.10.0.0/16
You deploy an Azure Virtual Desktop host pool that contains 10 session hosts to Subnets.
You plan to deploy a VPN gateway to VNet1 and provide the session hosts with access to the on-premises network.
You need to ensure that you can deploy the VPN gateway.
What should you do first?

A. Modify the address range of Subnet1.
B. Add a subnet named GatewaySubnet to VNet1.
C. Modify the address space of VNet1.
D. Associate a network security group (NSG) to Subnet1.

Show Suggested Answer

Suggested Answer: C 🗳️

by antuanfff at Aug. 31, 2022, 4:07 p.m.

Comments

Submit Cancel

kay000001

Highly Voted 2 years, 5 months ago

This is easy to test, and I tested to confirm. 1. You cannot alter a Subnet address while it contains resources, but 2. You can alter the address space of the Vnet.

upvoted 24 times

Oluseun

2 years, 2 months ago

This is the most correct answer so far. Try it yourself on the portal and you will find out. Don't trust chatgpt's answers.

upvoted 2 times

...

zapi

Most Recent 3 months, 4 weeks ago

Selected Answer: B

without creating a dedicated subnet named GatewaySubnet, you can't create a VPN gateway. It's easy as that and so the correct answer is "B".

upvoted 1 times

...

iceberg649

6 months ago

Selected Answer: C

I tested myself today and the answer is to modify the address space of VNET1. There is no ability to modify the address range of subnet1 when the resources are connected to it.

upvoted 1 times

...

jeff1988

7 months, 3 weeks ago

Selected Answer: B

To deploy a VPN gateway in your virtual network (VNet1), you need to create a dedicated subnet named GatewaySubnet. This subnet is required for the VPN gateway to function properly. Therefore, the correct answer is: B. Add a subnet named GatewaySubnet to VNet1.

upvoted 3 times

...

RabbitB

8 months, 4 weeks ago

Selected Answer: C

Tested in my lab. Obviously, we need to add a VPN Gateway Subnet, and we are not able to modify the address range if there are any resources in it. However, we are able to modify the VPN address range from 10.0.0.0/16 to 10.0.0.0/14. The answer is C.

upvoted 2 times

...

Alessandro365

1 year, 2 months ago

Selected Answer: C

address space and subnet are /16, cannot alter subnet address that contain resources

upvoted 2 times

...

ESAJRR

1 year, 5 months ago

Selected Answer: B

B. Add a subnet named GatewaySubnet to VNet1.

upvoted 2 times

kapankaj

9 months, 3 weeks ago

you can add a subnet but that will mean you will have two ranges that you will have to deal with. Easier to just modify the addresses. Grab some of the addresses from the existing subnet and then craft a gateway subnet

upvoted 1 times

...

MrDave1972

1 year, 6 months ago

Selected Answer: B

The address space and subnet are /16, why would you need to change them? You need a separate subnet for the gateway.

upvoted 1 times

compnerd916

1 year, 6 months ago

You can't add another subnet if the whole vNET is consumed by the existing subnet. All subnets must be contained within the vNET address space. Since the existing subnet spans the whole thing, you will need to expand the vNET address space to make room for the gateway subnet.

upvoted 2 times

...

OllyThompson

1 year, 7 months ago

Selected Answer: C

C is correct A subnet address space cannot be modified if it contains resources, and in this case, it contains 10 x session host VMs, so we must expand the vNet address space to add further subnets

upvoted 3 times

Fr3ggel

1 year, 5 months ago

Correct!! I Just tested this in a lab. B. It's not possible to create a gatewaysubnet because Subnet 1 comsumes the whole address space. A. It's not possible to modify the address range of subnet1 C. It is possible to modify the address space. After that you can a a Gateway Subnet, which is needed. So you first have to Modify the address space. The correct answer is C

upvoted 1 times

...

Judith1969

1 year, 7 months ago

B Gateway subnet Before you create a VPN gateway, you must create a gateway subnet. The gateway subnet contains the IP addresses that the virtual network gateway VMs and services use. When you create your virtual network gateway, gateway VMs are deployed to the gateway subnet and configured with the required VPN gateway settings. Never deploy anything else (for example, additional VMs) to the gateway subnet. The gateway subnet must be named 'GatewaySubnet' to work properly. Naming the gateway subnet 'GatewaySubnet' lets Azure know that this is the subnet to which it should deploy the virtual network gateway VMs and services. https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-gateway-settings

upvoted 1 times

...

RDIO

1 year, 8 months ago

Selected Answer: C

The answer is C. You cannot change a subnet with resources on it, so change the subnet is not applicable here.

upvoted 2 times

...

vipjason

1 year, 9 months ago

Selected Answer: A

The ONLY option here is the modify the address range of the subnet so additional subnets can be created. A network gateway must be created on its own gateway subnet.

upvoted 2 times

...

Toschu

1 year, 11 months ago

Selected Answer: A

The resources are not yet deployed, because we are in the planning phase. We need to make sure that there is a subnet available for the gateway -> We make the subnet smaller and add a new one

upvoted 3 times

...

picho707

2 years ago

I am confused about this question. Are you supposed to just make the change to make it work or are we supposed to pick that answer to make the changes following best practices?

upvoted 1 times

...