Manage Containers | Microsoft Azure Fundamentals Exam - AZ-900 | Microsoft

Manage Containers

Prev Question Next Question

Question

What additional resource is required by an Azure virtual machine?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

D

An Azure virtual machine (VM) is a virtualized computing environment that runs an operating system and applications in the cloud. When creating an Azure VM, there are several required resources, and among them, the additional resource required is a virtual network.

A. Virtual Network: A virtual network is an isolated network environment within Azure that allows resources, such as virtual machines, to communicate securely with each other and with the internet. It provides IP address management, subnetting, and network security features. When you create a virtual machine in Azure, you need to associate it with a virtual network. The virtual network provides the networking infrastructure for the VM and allows it to connect with other resources like storage accounts, databases, and other virtual machines.

B. Service Endpoint: A service endpoint is a configuration on a virtual network subnet that allows secure access to specific Azure services. It extends the virtual network's private address space to Azure services over a direct connection. While service endpoints are important for enabling secure communication between a virtual network and Azure services, they are not specifically required by an Azure virtual machine. So, option B is not the correct answer to the question.

C. Azure Firewall: Azure Firewall is a cloud-based network security service that allows you to protect your Azure virtual network resources. It provides network-level protection by filtering and inspecting network traffic based on rules and policies. While Azure Firewall is an essential component for securing network traffic in Azure, it is not a mandatory resource specifically required by an Azure virtual machine. Therefore, option C is not the correct answer.

D. Public IP Address: A public IP address is an address assigned to a resource in Azure that allows it to communicate with the internet. By default, when you create an Azure virtual machine, it gets assigned a private IP address within the virtual network. However, to enable direct communication with the internet or to access the virtual machine from the internet, you can associate a public IP address with the virtual machine. While a public IP address can be useful for certain scenarios, it is not a mandatory resource required by an Azure virtual machine. Therefore, option D is not the correct answer.

In summary, the correct answer is A. A virtual network is the additional resource required by an Azure virtual machine. It provides the necessary networking infrastructure for the VM to communicate with other resources and the internet securely.

An Azure virtual machine (VM) is a software emulation of a computer system running on the Azure cloud platform. When you create a VM in Azure, you need to provide some basic configuration details, including the virtual hardware specifications and the operating system image. One important resource that you need to associate with the VM is a virtual network.

A virtual network in Azure is a logically isolated network that provides connectivity to other Azure resources and the internet. Each VM must be associated with a virtual network, which provides the communication channel between the VM and other resources in Azure. The virtual network defines the IP address range, subnets, and routing tables for the VM, and it can be configured with various security features, such as network security groups and Azure Firewall.

A service endpoint is a configuration option that you can use to restrict network traffic to a specific Azure service. Service endpoints enable you to improve the security of your VMs by limiting inbound traffic to the virtual network to a specific service or a set of services. However, service endpoints are not required for every VM.

Azure Firewall is a network security service that provides centralized network security policy management and protection for your Azure virtual network resources. Azure Firewall can be used to enforce network security policies, filter network traffic, and provide visibility and analytics into network activity. However, Azure Firewall is not required for every VM.

A public IP address is a globally routable IP address that can be used to access your VM from the internet. Public IP addresses can be associated with a VM or a load balancer to enable access to the VM from outside the virtual network. However, not every VM requires a public IP address, and it is often recommended to restrict access to VMs through a VPN or a private endpoint.

Therefore, the correct answer to the question is A. a virtual network, as every Azure virtual machine requires an associated virtual network to provide network connectivity and security features.