Explanation: Azure automatically routes traffic between subnets in a virtual network. Therefore, all virtual machines in a virtual network can connect to the other virtual machinesin the same virtual network. Even if the virtual machines are on separate subnets within the virtual network, they can still communicate with each other. To ensure that a virtual machine cannot connect to the other virtual machines, the virtual machine must be deployed to a separate virtual network. References: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview