‹ All AZ-900 questions

AZ-900 Practice Question 26: Virtual Networks

Microsoft Azure Fundamentals (AZ-900) · Test 3 · question 6 of 10

Azure Architectureeasy

A team is moving three servers into Azure virtual machines. The VMs must reach each other privately, reach the internet outbound, and eventually connect back to the on-premises network. Which resource is the fundamental building block they have to create first?

Select one answer
Show answer and explanation

Answer:

  • C. An Azure virtual network containing one or more subnets

Azure Virtual Network is described as *the fundamental building block for your private network in Azure*. It is what lets VMs communicate securely with each other, with the internet, and with on-premises networks, all three requirements in the stem, and VMs are deployed into a subnet of a virtual network, so nothing else can be configured until it exists.

Option A, a load balancer, distributes incoming traffic across several instances. It is a reasonable later addition but it provides no private connectivity of its own and it needs a virtual network to live in. Option B, a network security group, filters traffic by source and destination address, port, and protocol; it is attached to a subnet or a network interface, both of which presuppose the virtual network. Option D, ExpressRoute, is one way to reach on-premises over a private connection rather than the internet, but it is an optional add-on attached to a virtual network and it does nothing for VM-to-VM traffic.

Reference: What is Azure Virtual Network?

Practice Test 3 ›

Study guides for AZ-900

Azure Administrator (AZ-104): jobs, salary and the examAzure administrator role, jobs and pay data, and the AZ-104 exam: five domains, 100 minutes, US$165 / ₹4,865, AZ-900 first or not, and what next.
Free cloud certifications in 2026: which are really freeWhich free cloud certifications are really free in 2026: Oracle's free OCI exams, and the voucher routes for AWS, Microsoft and Google, with prices.
AI-901 exam guide: Azure AI Fundamentals after AI-900AI-901 replaced AI-900: learn what changed, how much Python and Microsoft Foundry you need, exam costs in India, and how to prepare.
Microsoft Fabric certification: DP-700 vs DP-600Microsoft Fabric certification means two exams, DP-600 and DP-700. Their roles, skills, format, cost in India, and which one to take first.
Which cloud certification is best? AWS vs Azure vs GoogleWhich cloud certification is best for a beginner? AWS Cloud Practitioner, AZ-900 and Google Cloud Digital Leader compared: cost, format and which first.
Azure certification path 2026: AZ-900, AZ-104, AZ-305The Azure certification path for 2026 - AZ-900, AZ-104 and AZ-305 in order, what each covers, the AZ-305 prerequisite, renewal and what to skip.
Azure RBAC vs Azure Policy vs Entra roles vs resource locksHow Azure RBAC, Azure Policy, Microsoft Entra roles and resource locks differ, how scope inheritance works, and when deny beats audit.
Azure Storage redundancy - LRS, ZRS, GRS, GZRS and failoverHow LRS, ZRS, GRS, RA-GRS, GZRS and RA-GZRS differ, what failover does to your account, and how access tiers interact with redundancy.