| CCC.VPC.CP01 | Isolated Custom Network Creation | The service can create a virtual network that is logically isolated from the networks of other users of the same public cloud. | 1 |
| CCC.VPC.CP02 | IPv4 CIDR Block | The service can be configured with an IPv4 CIDR block that defines the private address range of the virtual network. | 1 |
| CCC.VPC.CP03 | IPv6 CIDR Block | The service can be configured with an IPv6 CIDR block in addition to IPv4 so that resources in the virtual network are addressable over IPv6. | 2 |
| CCC.VPC.CP05 | Private Subnet Creation | The service can create a subnet whose resources cannot directly reach the public internet, so that workloads are reachable only through private connectivity or an outbound gateway. | 1 |
| CCC.VPC.CP06 | Multiple Availability Zone Placement | The service can place subnets, gateways, and connection endpoints in more than one availability zone so that the loss of a single zone does not remove connectivity for the virtual network. | 1 |
| CCC.VPC.CP07 | Routing Control | The service can control traffic within the virtual network and between the network and the internet or on-premises networks using customizable route tables. | 1 |
| CCC.VPC.CP08 | Connectivity Options - Internet Gateway | The service can route traffic between resources in the virtual network and the public internet through an internet gateway, enabling direct internet access for those resources. | 2 |
| CCC.VPC.CP09 | Connectivity Options - NAT Gateways | The service can be configured with a NAT gateway that allows resources in private subnets to initiate connections to the internet without exposing them to inbound internet traffic. | 2 |
| CCC.VPC.CP10 | Connectivity Options - Private Connection | The service can be configured with a dedicated, private, high-speed connection between on-premises networks and the virtual network that does not traverse the public internet. | 2 |
| CCC.VPC.CP11 | Connectivity Options - VPC Peering | The service can establish a private peering connection between two virtual networks so that their resources communicate using private addresses. | 2 |
| CCC.VPC.CP12 | Connectivity Options - Transit Hub | The service can connect multiple virtual networks and on-premises networks through a central transit hub in a hub-and-spoke model. | 3 |
| CCC.VPC.CP13 | Connectivity Options - Site-to-site VPN | The service can establish an encrypted site-to-site VPN connection over the public internet between the virtual network and an on-premises network. | 3 |
| CCC.VPC.CP14 | Built-in DNS Resolution | The service automatically resolves hostnames to IP addresses for resources within the virtual network, allowing resources to communicate using hostnames instead of IP addresses. | 2 |
| CCC.VPC.CP15 | Built-in DHCP Assignment | The service automatically assigns IP addresses, subnet masks, default gateways, and other network configuration to resources within the virtual network. | 1 |
| CCC.VPC.CP16 | Flow Logs | The service can be configured to capture and publish records of the IP traffic flowing to and from network interfaces in the virtual network. | 1 |
| CCC.VPC.CP17 | Private Endpoints | The service can be configured with private endpoints that allow resources within the virtual network to reach other cloud services without traversing the public internet. | 1 |
| CCC.VPC.CP18 | Traffic Mirroring | The service can be configured to copy network traffic from selected network interfaces to a monitoring destination for out-of-band inspection. Azure offers this only in preview. | 1 |