Microsoft Azure Fundamentals (AZ-900)Describe Azure architecture and servicesEasy
A consulting firm needs to provision a new network environment in Azure for a client. This environment must be isolated from other client networks and contain several subnets for different application tiers (web, application, database). Which Azure service is the fundamental building block for creating this isolated and segmented network in Azure?
- AAzure Virtual Network (VNet)
- BAzure Load Balancer
- CAzure DNS
- DNetwork Security Groups (NSGs)
Show answer & explanationAnswer & explanation
Correct answer: A. Azure Virtual Network (VNet)
An Azure Virtual Network (VNet) is the fundamental building block for your private network in Azure. VNets enable many types of Azure resources, such as Azure Virtual Machines (VMs), to securely communicate with each other, the internet, and on-premises networks. They provide isolation and allow for segmentation into subnets.
Why the other options are wrong
- B. Azure Load Balancer distributes traffic across resources, it does not create the network isolation.
- C. Azure DNS provides name resolution, not network isolation or segmentation.
- D. NSGs are used for filtering network traffic within a VNet, not for creating the isolated network itself.
Azure Virtual Network (VNet)
An Azure Virtual Network (VNet) is a representation of your own network in the cloud. It is a logical isolation of the Azure cloud dedicated to your subscription.
- Enables Azure resources to communicate securely.
- Provides isolation and segmentation with subnets.
- Can be connected to on-premises networks and other VNets.
Memory trick: A VNet is your private virtual 'land' in the vast Azure 'ocean', where you build your own neighborhoods (subnets).