nerdexam
Microsoft

AZ-900 · Question #68

This question requires that you evaluate the underlined text to determine if it is correct. You plan to deploy 20 virtual machines to an Azure environment. To ensure that a virtual machine named VM1 c

The correct answer is A. No change is needed. To isolate VM1 from other virtual machines, deploying it to a separate virtual network is a correct and effective method.

Submitted by eva_at· Mar 5, 2026Describe Azure architecture and services

Question

This question requires that you evaluate the underlined text to determine if it is correct. You plan to deploy 20 virtual machines to an Azure environment. To ensure that a virtual machine named VM1 cannot connect to the other virtual machines, VM1 must be deployed to a separate virtual network. Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.

Options

  • ANo change is needed
  • Brun a different operating system than the other virtual machines
  • Cbe deployed to a separate resource group
  • Dhave two network interfaces

How the community answered

(42 responses)
  • A
    95% (40)
  • B
    2% (1)
  • C
    2% (1)

Why each option

To isolate VM1 from other virtual machines, deploying it to a separate virtual network is a correct and effective method.

ANo change is neededCorrect

Virtual networks provide inherent network isolation; virtual machines in different virtual networks cannot communicate by default unless explicit peering or other routing mechanisms are configured. Deploying VM1 to its own virtual network ensures it's isolated from other VMs in different virtual networks.

Brun a different operating system than the other virtual machines

Running a different operating system does not prevent network connectivity between virtual machines; OS differences are irrelevant to network isolation at the virtual network level.

Cbe deployed to a separate resource group

Deploying VM1 to a separate resource group does not provide network isolation, as resource groups are a logical grouping for management and billing, not network segmentation.

Dhave two network interfaces

Having two network interfaces on a VM does not inherently prevent it from connecting to other VMs; it could potentially increase connectivity options rather than restrict them.

Concept tested: Azure Virtual Network Isolation

Source: https://learn.microsoft.com/en-us/azure/virtual-network/virtual-networks-overview

Community Discussion

No community discussion yet for this question.

Full AZ-900 Practice