VNet1’s single subnet currently covers the entire 10.10.0.0/16 address space. Before you can deploy a VPN gateway to VNet1, what should you modify first?
Choose an answer
Tap an option to check your answer.
Correct answer: Modify the address space of VNet1..
Why this is the answer
The correct answer is to modify the address space of VNet1. A VPN gateway requires a dedicated subnet named GatewaySubnet. This subnet must be created within the virtual network's address space. Since VNet1's single subnet currently occupies the entire 10.10.0.0/16 address space, there is no available space to create the GatewaySubnet. Therefore, you must first expand the VNet1's address space (e.g., to 10.10.0.0/16, 10.11.0.0/16) to free up a portion for the new GatewaySubnet. Modifying the address range of Subnet1 is incorrect because even if you shrink Subnet1, the VNet's overall address space remains fully allocated to that single subnet. Adding a subnet named GatewaySubnet to VNet1 is the next step, but it cannot be done until there's available address space. Associating an NSG to Subnet1 is irrelevant to the creation of a VPN gateway.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed