You administer an Azure solution that uses a virtual network named fabVNet. FabVNet has a single
subnet named Subnet-1. You discover a high volume of network traffic among four virtual machines

(VMs) that are part of Subnet-1. You need to isolate the network traffic among the four VMs. You
want to achieve this goal with the least amount of downtime and impact on users. What should you
do?

A.
Create a new subnet in the existing virtual network and move the four VMs to the new subnet.

B.
Create a site-to-site virtual network and move the four VMs to your datacenter.

C.
Create a new virtual network and move the VMs to the new network.

D.
Create an availability set and associate the four VMs with that availability set.

Explanation:
Machine Isolation Options. There are three basic options where machine isolation may be
implemented on the Windows Azure platform:
* Between machines deployed to a single virtual network Subnets within a Single Virtual Network
* Between machines deployed to distinct virtual networks
* Between machines deployed to distinct virtual networks where a VPN connection has been
established from on-premises with both virtual networks
Windows Azure provides routing across subnets within a single virtual network.
Incorrect:
not B: A site-to-site VPN allows you to create a secure connection between your on- premises site
and your virtual network. Use a site-to-site connection when:
* You want to create a branch office solution.
* You want a connection between your on-premises location and your virtual network that’s
available without requiring additional client-side configurations.