Used to segment a virtual network. Provide logical divisions within your network. Can help improve security, increase performance, and make it easier to manage the network. Each __________ contains a range of IP addresses that fall within the virtual network address space. Each __________ must have a unique address range, specified in CIDR format. The address range cannot overlap with other __________s in the virtual network in the same subscription.