AZ-104 Practice Question 48: Peering Address Space Sync

Microsoft Azure Administrator Associate (AZ-104) · Test 5 · question 8 of 10

Virtual Networkingmedium

VNet-Spoke1 (10.1.0.0/16) is peered to VNet-Hub, and the peering has worked for months. VNet-Spoke1 has run out of addresses, so you add a second address range, 10.4.0.0/16, create the subnet snet-new inside it, and deploy VMs there.

VMs in VNet-Hub can still reach everything in 10.1.0.0/16, but nothing in snet-new. Connectivity on the existing ranges must not be interrupted while you fix this. What should you do?

Show answer and explanation

Answer:

C. Sync the virtual network peering on both virtual networks so the new address range is propagated

Resizing the address space of a peered virtual network is supported "without incurring any downtime on the currently peered address space", and adding address ranges is one of the listed ways to do it. The step people forget is the one that makes the change visible to the other side: "after the address space is resized, peers must sync with the new address space changes", and you "can sync virtual network peers through the Azure portal or with Azure PowerShell". Until the sync runs, the hub's subnets have no Virtual network peering route for 10.4.0.0/16, which is exactly the symptom. Microsoft also recommends running the sync after each resize rather than batching several changes.

Option A would eventually restore connectivity, but it drops the peering in the meantime and so breaks traffic on 10.1.0.0/16, the one thing the stem forbids. It is also unnecessary work when a sync does the job in place.

Option B is not possible. "You can't specify Virtual network peering or VirtualNetworkServiceEndpoint as the next hop type in UDRs"; Azure creates those routes itself when a peering exists.

Option D invents a limit. A virtual network can carry several address ranges, peered or not; the doc lists adding ranges, modifying a prefix, and deleting ranges as supported operations.

Reference: Virtual network peering

Practice Test 5 ›

Study guides for AZ-104

Azure Administrator (AZ-104): jobs, salary and the examAzure administrator role, jobs and pay data, and the AZ-104 exam: five domains, 100 minutes, US$165 / ₹4,865, AZ-900 first or not, and what next.

AZ-400 exam guide: DevOps Engineer Expert in 2026AZ-400 exam guide: the DevOps Engineer Expert prerequisites now that AZ-204 is retired, the five skill areas, price, renewal and a study plan.

Azure certification path 2026: AZ-900, AZ-104, AZ-305The Azure certification path for 2026 - AZ-900, AZ-104 and AZ-305 in order, what each covers, the AZ-305 prerequisite, renewal and what to skip.

Azure RBAC vs Azure Policy vs Entra roles vs resource locksHow Azure RBAC, Azure Policy, Microsoft Entra roles and resource locks differ, how scope inheritance works, and when deny beats audit.

Azure Storage redundancy - LRS, ZRS, GRS, GZRS and failoverHow LRS, ZRS, GRS, RA-GRS, GZRS and RA-GZRS differ, what failover does to your account, and how access tiers interact with redundancy.