networkSingle choice
You have two virtual networks in the East US region: • VNet1 — address space 10.10.0.0/16 • VNet2 — address space 10.10.128.0/17 You need to connect VNet1 and VNet2 by using virtual network peering. VNet1 must NOT be modified. What should you do first?
عندك Virtual networkين في East US: • VNet1 — الـ Address space بتاعها 10.10.0.0/16 • VNet2 — الـ Address space بتاعها 10.10.128.0/17 محتاج توصّل VNet1 بـ VNet2 باستخدام Virtual network peering. وممنوع تعدّل VNet1. إيه أول حاجة لازم تعملها؟
- ADeploy a VPN gateway to each virtual network.
- BModify the address space of VNet2 so that it does not overlap with VNet1.
- CEnable "Allow forwarded traffic" on both peering links.
- DMove VNet2 to a different Azure region.
Why: VNet peering requires that the address spaces of the two VNets do not overlap. 10.10.128.0/17 (10.10.128.0–10.10.255.255) sits inside 10.10.0.0/16, so the peering cannot be created. Because VNet1 must stay unchanged, VNet2 has to be re-addressed (for example to 10.20.0.0/16; existing subnets must be removed or re-created first). A VPN gateway does not solve overlap — overlapping ranges can't be routed either way. "Allow forwarded traffic" only controls traffic that originates outside the peered VNet and has nothing to do with overlap. Moving VNet2 to another region would turn it into global peering, which also rejects overlapping ranges.
Exam skills it covers
- Create and configure virtual network peering