Virtual networking
40 free practice questions with explanations
PassNova has 40 free Microsoft Azure Administrator (AZ-104) practice questions on Virtual networking, each with a clear explanation. Practise them in the browser with instant feedback — 100% free, no sign-up, on any device. Updated for 2026.
Virtual networking: example questions & answers
Here are 6 example questions from this topic. Practise the full set of 40 free in the browser.
-
What is the smallest IP address range you can assign to an Azure subnet using CIDR notation?
- A /24
- B /29 ✓
- C /28
- D /30
Answer: The smallest usable Azure subnet is a /29, providing 8 addresses (5 usable after Azure reserves the first three and last one).
-
How many IP addresses does Azure reserve in every subnet?
- A 1
- B 3
- C 5 ✓
- D 8
Answer: Azure reserves five addresses in each subnet: the network address, the broadcast address, and three for internal services (gateway and DNS mapping).
-
What does a Network Security Group (NSG) do?
- A Encrypts traffic between regions
- B Filters inbound and outbound traffic with allow/deny rules ✓
- C Provides DNS resolution
- D Distributes traffic across VMs
Answer: An NSG contains security rules that allow or deny inbound and outbound network traffic to resources based on source, destination, port, and protocol.
-
In NSG rule processing, what determines which rule applies first?
- A The alphabetical name of the rule
- B The rule with the lowest priority number ✓
- C The rule created most recently
- D The largest port range
Answer: NSG rules are processed in priority order from the lowest number to the highest; the first matching rule is applied and processing stops.
-
What is required for two virtual networks in different regions to communicate as if on the same network?
- A A Network Security Group
- B Global VNet peering ✓
- C A public load balancer
- D Azure DNS
Answer: Global VNet peering connects virtual networks across Azure regions, allowing resources to communicate privately over the Microsoft backbone.
-
Which statement about VNet peering is correct?
- A Peering is automatically transitive across three or more VNets
- B Peering is non-transitive by default ✓
- C Peering requires a VPN gateway
- D Peered VNets must share the same address space
Answer: VNet peering is non-transitive, so if A peers with B and B peers with C, A and C cannot communicate unless directly peered or routed through a gateway/NVA.