AZ-104 Implement and Manage Virtual Networking Practice Question
You deploy two virtual networks named VNetA and VNetB in the same Azure region. VNetA uses address space 10.10.0.0/16 and VNetB uses 10.11.0.0/16. Virtual machines in each network must communicate privately over the Azure backbone without traversing the public internet, and you want the lowest-latency, simplest configuration. What should you configure?
⚠ Common exam trap
The trap here is reaching for VPN gateways or firewalls when simple virtual network peering already satisfies private, low-latency connectivity between non-overlapping networks in the same region.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure virtual network peering between VNetA and VNetB.
Virtual network peering links two virtual networks over the Azure backbone, providing low-latency private connectivity without gateways, public IPs, or encryption overhead. With non-overlapping address spaces in the same region, peering is the simplest and most cost-effective solution for VM-to-VM communication.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Deploy an Azure Firewall in VNetA and create user-defined routes in both networks to force traffic through the firewall.
Why it's wrong here
An Azure Firewall with user-defined routes would provide connectivity but adds significant cost, management, and configuration complexity. It is intended for traffic inspection and centralized policy, not simple virtual network-to-virtual network communication. For basic private connectivity between two non-overlapping virtual networks, peering is simpler and requires no firewall or route tables.
- ✓
Configure virtual network peering between VNetA and VNetB.
Why this is correct
Virtual network peering connects virtual networks over the Azure backbone with low latency and no gateways or public IPs. Because the address spaces do not overlap and both networks are in the same region, peering is supported directly. It is the simplest and most cost-effective way to enable private communication between the two virtual networks.
- ✗
Create a site-to-site VPN connection between the two virtual networks using virtual network gateways.
Why it's wrong here
A site-to-site VPN between virtual networks encrypts traffic but routes it through gateways, adding latency and requiring gateway subnets, public IPs, and connection resources on both sides. It is more expensive and complex than needed for same-region private connectivity. The scenario asks for the simplest low-latency option, which virtual network peering provides without gateways.
- ✗
Create private endpoints for the virtual machines in each virtual network and connect them through Azure Private Link.
Why it's wrong here
Azure Private Link and private endpoints are designed to expose PaaS services privately, not to connect virtual machines across virtual networks. Private endpoints do not provide general IP-level routing between VNetA and VNetB. Using them for VM-to-VM communication is unsupported and would not achieve the required connectivity between the virtual networks.
Go deeper
Related to this question
Learn chapter
Public IP Address Prefixes
Key term
Encryption
Encryption is the process of converting readable data into a secret code to prevent unauthorized access.
Key term
Region
A region is a distinct geographic location where a cloud provider operates multiple data centers that are connected by low-latency networks and provide cloud services.
About these practice questions
One of 1,053 original AZ-104 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This AZ-104 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-104 exam.