You administer an Azure solution that uses a virtual network named fabVNet. FabVNet has a single subnet
named Subnet-1.You discover a high volume of network traffic among four virtual machines (VMs) that are part of Subnet-
1
You need to isolate the network traffic among the four VMs. You want to achieve this goal with the least
amount of downtime and impact on users.
What should you do?

A.
Create a new subnet in the existing virtual network and move the four VMs to the new subnet.

B.
Create a site-to-site virtual network and move the four VMs to your datacenter.

C.
Create a new virtual network and move the VMs to the new network.

D.
Create an availability set and associate the four VMs with that availability set.

Explanation:
Machine Isolation Options
There are three basic options where machine isolation may be implemented on the Windows Azure
platform:
* Between machines deployed to a single virtual network
Subnets within a Single Virtual Network
* Between machines deployed to distinct virtual networks
* Between machines deployed to distinct virtual networks where a VPN connection has been established
from on-premises with both virtual networks
Windows Azure provides routing across subnets within a single virtual network.

Network Isolation Options for Machines in Windows Azure Virtual Networks
Incorrect:
not B: A site-to-site VPN allows you to create a secure connection between your on-premises site and
your virtual network.
Use a site-to-site connection when:
* You want to create a branch office solution.
* You want a connection between your on-premises location and your virtual network that’s available
without requiring additional client-side configurations.