Which Azure networking service creates a private, isolated network where resources can communicate securely with each other and with on-premises environments?
Show answer and explanation
Answer: B
A virtual network is Azure's foundational private network: you define the address space, subnets, routing, and security rules, and resources inside it communicate privately. Connections into other networks, whether peered VNets, on-premises sites, or the internet, are built on top of it.
ExpressRoute and VPN Gateway are connection services that attach into a VNet rather than being the isolated network itself, and Front Door is a global HTTP delivery service operating above them.
Why the other options are wrong
- A. ExpressRoute provides a dedicated private connection from on-premises into Azure; it links to a VNet but is not itself the isolated network where resources live.
- C. VPN Gateway creates encrypted tunnels over the internet into a VNet, so the VNet must already exist for the gateway to connect to.
- D. Azure Front Door is a global HTTP and HTTPS load balancing and delivery service and cannot create private networks.