Instiq
Chapter 4 · Implement and Manage Virtual Networking·v2.0.0·Updated 6/16/2026·~9 min

What's changed: Deepened AZ-104 Chapter 4 to Associate depth (tables, scenarios, FAQ, traps; localized figures)

4.1Virtual Networks (VNet) and Subnets

Key points

Understand the foundation of Azure networking: virtual networks (VNet) and address space, subnetting (public/private), and IP address basics.

A virtual network (VNet) is your private network on Azure. You set an address space (e.g., 10.0.0.0/16) and split it into subnets by purpose.

4.1.1VNet and subnets

Diagram showing a VNet (10.0.0.0/16) split into a public subnet (10.0.1.0/24, web tier, internet-facing) and a private subnet (10.0.2.0/24, DB tier, no public IP), with NSGs filtering traffic per subnet/NIC.
VNet and subnets
  • VNet: a private network on Azure with an address space (CIDR).
  • Subnet: segments a VNet by purpose; commonly split into public (web tier) / private (DB tier).
  • Resources (e.g., VMs) are placed in a subnet and receive a private IP.
Exam point

Common on AZ-104: VNet = private network, subnets separate public/private, DBs in a private subnet (no public IP). Resources within a VNet (same region) can communicate by default.

Continue reading — free sign-up

You're reading the free preview. Sign up free to read this section in full, plus every chapter (including 4+) and all questions.