Microsoft Azure Administrator Associate AZ-104 Practice Question

Subnets divide the IP address space of a virtual network into smaller segments. By creating separate subnets, you can assign distinct address ranges to front-end and back-end tiers, apply Network Security Groups to each subnet if needed, and maintain isolation without creating a second virtual network. Network Security Groups control traffic flow but do not split address ranges. Virtual Network Gateways provide connectivity to other networks, and route tables determine next-hop paths; neither construct subdivides the address space.