An organization is deploying a multi-tier application in a single Azure Virtual Network (VNet). The application architecture includes public-facing web servers, private backend application servers, and dedicated database instances. The network administrator needs to segment the virtual network's IP address range into smaller, isolated sections to organize workloads and apply granular routing and security policies to each tier. Which Azure networking feature should the administrator configure to divide the virtual network?

Subnets: ### What Azure Virtual Subnets Are An **Azure virtual subnet** is a range of IP addresses within an Azure **Virtual Network (VNet)**. Subnets allow organizations to subdivide a large VNet address space into smaller, distinct, and manageable network segments. ### How Subnets Meet the Requirement - **Workload Segmentation**: Subnets divide the VNet address space into distinct IP ranges, allowing the organization to separate web servers, backend application servers, and database tiers into dedicated logical zones. - **Granular Traffic Control**: By placing each tier in its own subnet, administrators can attach distinct **Network Security Groups (NSGs)** and **route tables** to control inbound and outbound traffic at each specific application layer. - **Address Space Management**: Subnets enable efficient allocation and organization of private IP addresses across different services within a single cloud environment. ### Key Advantages and Capabilities - **Network Organization**: Groups related resources together, simplifying IP address management and infrastructure topology. - **Enhanced Security Boundaries**: Acts as an enforcement boundary where security rules, firewalls, and custom routing can be targeted precisely. - **Service Integration**: Supports dedicated service delegation, such as reserving subnets for Azure SQL Managed Instances, Azure Bastion, or Application Gateways. - **Internal Routing by Default**: Resources within different subnets of the same VNet can communicate with each other automatically without requiring extra gateway configurations. ### Why This Is Optimal Subnets are the fundamental building blocks for segmenting address space within a single VNet. They provide the necessary architectural structure to isolate application tiers, organize resources, and establish security boundaries effectively.

Azure Virtual Network Subnets Segmentation | Start here! Get your feet wet with the Microsoft cloud and begin your journey to earning your Microsoft Certified: Azure Fundamentals certification!

StudyCerts

Azure Virtual Network Subnets Segmentation | Start here! Get your feet wet with the Microsoft cloud and begin your journey to earning your Microsoft Certified: Azure Fundamentals certification! | StudyCerts

AZ-900 Microsoft Azure Fundamentals Exam

Related questions