Following assumptions need to be tested:
By default, 2 resources in a virtual network can communicate with each other on any port, without internet access.
By default, a resource placed in a virtual network does not have access to the internet.
Assigned IPs are within the specified subnet CIDR block range.