Microsoft Azure Administrator Associate AZ-104 Practice Question
You have an Azure virtual network named VNet1 that contains a subnet named Subnet1. There is an Azure Storage account named storage1. You need to ensure that storage1 accepts connections from Subnet1 and rejects connections from other networks. What should you do?
You selected this option
Associate an NSG with Subnet1 to allow traffic to storage1.
You selected this option
Enable virtual network service endpoints for storage1 on Subnet1.
You selected this option
Configure a service endpoint policy for storage1.
You selected this option
Create a user-defined route in Subnet1 to storage1.
To ensure that storage1 accepts connections from Subnet1 and rejects connections from other networks, you should enable virtual network service endpoints for Azure Storage on Subnet1 and configure the storage account's firewall to allow access from that subnet. Service endpoints extend your virtual network's identity to Azure services, enabling you to restrict access to specific subnets. Configuring a service endpoint policy manages outbound traffic from your virtual network but does not restrict inbound access to the storage account. Creating a user-defined route does not control access to storage1. Associating an NSG with Subnet1 cannot restrict access to Azure Storage services because NSGs cannot filter traffic to PaaS services over the Azure backbone network.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What are virtual network service endpoints in Azure?
Open an interactive chat with Bash
How does enabling service endpoints differ from using NSGs?
Open an interactive chat with Bash
What is a user-defined route (UDR) and how does it relate to this scenario?
Open an interactive chat with Bash
Microsoft Azure Administrator Associate AZ-104
Configure and manage virtual networking
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Oh snap!
Loading...
Loading...
Loading...
Information Technology Package Join Premium for Full Access