An architect wants a service that lets VMs and databases communicate securely with each other, with users on the internet, and with on-premises computers as an extension of the corporate network. Which Azure service provides this?
- AAn availability set spanning the deployed VMs
- BA resource group holding all the resources
- CAn Azure DNS zone for the resources
- DAn Azure virtual network covering the resources Correct
Why A is wrong: An availability set groups VMs across update and fault domains to improve resiliency inside a region, but it provides no connectivity between resources, the internet, or on-premises networks.
Why B is wrong: A resource group is a management and billing container that organises related resources, but membership in one creates no network path between those resources or to external networks.
Why C is wrong: Azure DNS hosts domains and resolves names to IP addresses using Microsoft infrastructure, but it does not move traffic or interconnect resources the way a network does.
Why D is correct: Correct. A virtual network is the foundational connectivity layer in Azure, enabling isolation, internet and inter-resource communication, and on-premises links so resources behave as one extended network.