What should you do?

You administer an Azure solution that uses a virtual network named FabVNet. FabVNet has a single subnet named Subnet-1.

You discover a high volume of network traffic among four virtual machines (VMs) that are part of Subnet-1.

You need to isolate the network traffic among the four VMs. You want to achieve this goal with the least amount of downtime and impact on users.

What should you do?
A . Create a new subnet in the existing virtual network and move the four VMs to the new subnet.
B . Create a site-to-site virtual network and move the four VMs to your datacenter.
C . Create a new virtual network and move the VMs to the new network.
D . Create an availability set and associate the four VMs with that availability set.

View Answer

Answer: C

Explanation:To isolate the VMs, we could use Windows Firewall or Network Security Groups (NSG) but they’re not options here.

If we move the VMs to a new subnet in the same virtual network, traffic can still flow to VMs on the other subnet. We would still need additional security such as an NSG; therefore, answer A is incorrect.

The answer is to create a new virtual network and move the VMs to the new network. This would provide the required isolation without the need for additional security such as an NSG.