Microsoft Azure Fundamentals — Question 52

Your company plans to move several servers to Azure.
The company's compliance policy states that a server named FinServer must be on a separate network segment.
You are evaluating which Azure services can be used to meet the compliance policy requirements.
Which Azure solution should you recommend?

Answer options

• A. a resource group for FinServer and another resource group for all the other servers
• B. a virtual network for FinServer and another virtual network for all the other servers
• C. a VPN for FinServer and a virtual network gateway for each other server
• D. one resource group for all the servers and a resource lock for FinServer

Correct answer: B

Explanation

The correct answer is B because using separate virtual networks allows FinServer to be isolated on a different network segment, adhering to the compliance policy. Option A does not isolate the network segments; Option C is not necessary as a VPN does not provide the required network segmentation, and Option D does not achieve the required isolation since all servers would still be in the same resource group.