Exam AZ-140 topic 2 question 27 discussion

This is easy to test, and I tested to confirm. 1. You cannot alter a Subnet address while it contains resources, but 2. You can alter the address space of the Vnet.

without creating a dedicated subnet named GatewaySubnet, you can't create a VPN gateway. It's easy as that and so the correct answer is "B".

I tested myself today and the answer is to modify the address space of VNET1. There is no ability to modify the address range of subnet1 when the resources are connected to it.

To deploy a VPN gateway in your virtual network (VNet1), you need to create a dedicated subnet named GatewaySubnet. This subnet is required for the VPN gateway to function properly. Therefore, the correct answer is: B. Add a subnet named GatewaySubnet to VNet1.

Tested in my lab. Obviously, we need to add a VPN Gateway Subnet, and we are not able to modify the address range if there are any resources in it. However, we are able to modify the VPN address range from 10.0.0.0/16 to 10.0.0.0/14. The answer is C.

address space and subnet are /16, cannot alter subnet address that contain resources

B. Add a subnet named GatewaySubnet to VNet1.

The address space and subnet are /16, why would you need to change them? You need a separate subnet for the gateway.

C is correct A subnet address space cannot be modified if it contains resources, and in this case, it contains 10 x session host VMs, so we must expand the vNet address space to add further subnets

B Gateway subnet Before you create a VPN gateway, you must create a gateway subnet. The gateway subnet contains the IP addresses that the virtual network gateway VMs and services use. When you create your virtual network gateway, gateway VMs are deployed to the gateway subnet and configured with the required VPN gateway settings. Never deploy anything else (for example, additional VMs) to the gateway subnet. The gateway subnet must be named 'GatewaySubnet' to work properly. Naming the gateway subnet 'GatewaySubnet' lets Azure know that this is the subnet to which it should deploy the virtual network gateway VMs and services. https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-gateway-settings

The answer is C. You cannot change a subnet with resources on it, so change the subnet is not applicable here.

The ONLY option here is the modify the address range of the subnet so additional subnets can be created. A network gateway must be created on its own gateway subnet.

The resources are not yet deployed, because we are in the planning phase. We need to make sure that there is a subnet available for the gateway -> We make the subnet smaller and add a new one

I am confused about this question. Are you supposed to just make the change to make it work or are we supposed to pick that answer to make the changes following best practices?

It was tested in the lab.

Correct Answer C

Correct Answer C