ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-305 All Questions

View all questions & answers for the AZ-305 exam
Go to Exam

Exam AZ-305 topic 4 question 24 discussion

Actual exam question from Microsoft's AZ-305
Question #: 24
Topic #: 4
[All AZ-305 Questions]

DRAG DROP -
You have an on-premises network that uses an IP address space of 172.16.0.0/16.
You plan to deploy 30 virtual machines to a new Azure subscription.
You identify the following technical requirements:
✑ All Azure virtual machines must be placed on the same subnet named Subnet1.
✑ All the Azure virtual machines must be able to communicate with all on-premises servers.
✑ The servers must be able to communicate between the on-premises network and Azure by using a site-to-site VPN.
You need to recommend a subnet design that meets the technical requirements.
What should you include in the recommendation? To answer, drag the appropriate network addresses to the correct subnets. Each network address may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:

Show Suggested Answer Hide Answer
Suggested Answer:
by GarryK at Sept. 10, 2022, 10:12 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Davin0406
Highly Voted 2 years, 1 month ago
Correct. appeared in exam, 10/14/2022. I passed with 946/1000 and there were only 1~2 new questions but others were all from AZ-305 dump.
upvoted 35 times
...
weiofu
Highly Voted 1 year, 7 months ago
1. Cannot overlap -> 172.16.0.0/16 is out 2. 30 machines -> 192.168.1.0/27 is 32 IPs, but Azure always uses 5 for itself, so would be too small for the machine subnet => process of elimination leads to Subnet1 = 192.168.0.0/24, Gateway Subnet = 192.168.1.0/27
upvoted 34 times
...
SeMo0o0o0o
Most Recent 3 weeks, 2 days ago
CORRECT
upvoted 1 times
...
Lazylinux
7 months, 3 weeks ago
Given answer is correct and so easy to spot it the answer without knowing much about subnetting and here is why Make sure the PRIVATE IPs for on-prem and Azure DO NOT OVERLAP and hence from given options you can eliminate 172.16.xx Also the VPN GWY needs be of /27 minimum preferably /26 or 25 CIDR
upvoted 1 times
...
JoShizo
9 months, 1 week ago
Subnet1: 192.168.0.0/24 Gateway subnet: 192.168.1.0/27
upvoted 1 times
...
spotted
12 months ago
Just so you know, the formula to apply, which you can search also on Wikipedia is 2^n - 2. n = 32 - 16 (for example) = 16 2^16 - 2 = 65536 - 2 = 65534 However, besides the broadcast address and the id address of the subnet (e.g. 172.16.0.0), Azure uses 3 additional IPs for itself, hence we have to subtract 5. So the formula becomes: n = 32 - 16 (for example) = 16 2^16 - 5 = 65536 - 5 = 65531 This helps you to calculate it during the exam rather than learning it by heart as the numbers could change any time but the formula and the reserved ips stay the same.
upvoted 3 times
...
King_Laps
1 year, 7 months ago
Subnet1: 192.168.0.0/24 Gateway Subnet: 192.168.1.0/27
upvoted 1 times
...
azkumar305
1 year, 7 months ago
I got this on 14-Apr-2023
upvoted 5 times
...
NotMeAnyWay
1 year, 8 months ago
Subnet1: 192.168.0.0/24 Gateway Subnet: 192.168.1.0/27 Using the 192.168.0.0/24 address for Subnet1 in Azure allows you to deploy the 30 virtual machines without overlapping with your on-premises IP address space (172.16.0.0/16). For the Gateway Subnet, using 192.168.1.0/27 is correct because it ensures that the Gateway Subnet is separate from the Azure VMs subnet (Subnet1) and also does not overlap with the on-premises IP address space. By keeping the Gateway Subnet distinct from both the Azure VMs subnet and the on-premises IP address space, you can avoid any potential routing issues and ensure proper communication between the on-premises network and Azure through a site-to-site VPN.
upvoted 9 times
...
NianSpannie98
1 year, 10 months ago
This is Correct. On Prem and Vnet IP Addresses can not overlap for site to site or point to site connections. on prem is curerntly 172.16.0.0/16, so172.16.x.x/16 and up is not available for Vnet. So subnet is 192.168.0.0/24 Microsoft also recommends Gateway to be /27. So 192.168.1.0/27 is correct
upvoted 6 times
...
VBK8579
1 year, 10 months ago
For the Azure virtual machines to communicate with the on-premises network and meet the technical requirements, the subnet design should be as follows: Network address for Subnet1: 192.168.0.0/24 or 192.168.1.0/27 Network address for Gateway subnet: 192.168.0.0/27 or 192.168.1.0/28 It's important to note that using private IP addresses that are not reserved for private networks (such as 172.16.0.0/16) is not recommended in a production environment as it may cause IP address conflicts.
upvoted 3 times
...
OPT_001122
1 year, 10 months ago
Given answer is correct, Thanks all who have mentioned the exam dates
upvoted 1 times
...
rocroberto
2 years ago
I would think that another reason why the 172.X.X.X are not usable is because those are Non Routable Ip Addresses (they cannot be used except by Azure systems)
upvoted 1 times
Guest
1 year, 11 months ago
192.168.x.x is not routable either so that would make no difference 172.16.x.x is also a private range See https://www.okta.com/identity-101/understanding-private-ip-ranges/ But you can't have overlapping IP ranges , so that's why 172.16.x.x can't be used in Azure for this case Gateway subnet must be /27 or larger 30 machines + reserved ip's requires at least a /26 , so they answer is correct
upvoted 5 times
...
...
Darkx
2 years, 1 month ago
appeared on 11th Oct 2022
upvoted 3 times
...
GarryK
2 years, 2 months ago
Correct: https://docs.microsoft.com/en-us/azure/vpn-gateway/tutorial-site-to-site-portal?source=recommendations Create a virtual network Create a VPN gateway Create a local network gateway Create a VPN connection Verify the connection Connect to a virtual machine None of the subnets of your on-premises network can over lap with the virtual network subnets that you want to connect to.
upvoted 12 times
yonie
1 year, 7 months ago
Thanks!
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago