az-305 Practice Question 1971
Exam: az-305
Domain: Design infrastructure solutions
Topic: Design network solutions
Difficulty: medium
In a scenario where you need to design a network solution that ensures all Azure Virtual Machines (VMs) in a subscription can communicate with each other but restrict external internet access, which of the following network designs should you implement?
Answer Options
A
Implement an Azure Virtual WAN to provide global connectivity.
B
Deploy a Hub-Spoke topology to centralize traffic and control internal communication.
C
Use Private Link to privately connect services within the subscription.
D
Configure a Point-to-Site connection for secure access to the VMs from the internet.
Correct Answer
B: Deploy a Hub-Spoke topology to centralize traffic and control internal communication.
Explanation
The Hub-Spoke topology is designed to centralize traffic through a hub virtual network, allowing for easy management and control over traffic between multiple spoke virtual networks. This design ensures that all VMs within the same subscription can communicate with each other while restricting external internet access. Azure Virtual WAN is more suitable for global connectivity and not for internal communication within a subscription. Private Link architecture is used to privately connect services without exposing them to the public internet, which does not fit the requirement of internal communication.