Microsoft Certified: Azure Fundamentals (AZ-900) Practice Exam

Which of the following is true about virtual networks?

1. You configure virtual networks through software.

2. A virtual network accepts network traffic on all ports. You configure the firewall through virtual machines.

3. Virtual networks are always reachable from the internet.

4. Virtual networks require static IP addresses.

The correct answer is: You configure virtual networks through software.

The correct assertion regarding virtual networks is that they are configured through software. This capability is one of the core advantages of using cloud services like Azure. In Azure, virtual networks can be easily deployed and managed via the Azure portal, command-line interface, or automation scripts, allowing for flexibility and ease of use. This software-defined approach allows you to create, modify, and manage networking resources without the need for extensive physical infrastructure changes. While virtual networks indeed facilitate communication between resources, it’s important to recognize that they don’t automatically accept network traffic on all ports. Proper network security is achieved through the use of Network Security Groups (NSGs) that define which traffic is allowed or denied. Additionally, virtual networks are not always reachable from the internet. By default, they are private networks, and external access must be explicitly configured. This often means integrating with additional services like VPN gateways or Azure Bastion for secure remote connectivity. Lastly, virtual networks do not require static IP addresses. They can utilize both dynamic and static IP addressing, depending on the necessary configuration and requirements of the resources within the network.