Microsoft Azure Security Engineer Associate AZ-500 Practice Question
You deploy an Azure Storage account that is set to allow access only from selected virtual networks and IP addresses. A diagnostic pipeline that uses Azure Monitor and Event Grid can no longer reach the storage account. All other traffic from the allowed subnets works correctly. To restore connectivity for these platform services without widening public access, which firewall configuration should you change?
Disable public network access for the storage account.
Create a service endpoint for Microsoft.Storage on the virtual network.
Add the outbound IP addresses of the App Service plan to the storage firewall.
Enable the option that allows trusted Microsoft services to bypass the storage firewall.
Azure Monitor and Event Grid are included in the list of "trusted Microsoft services" for Azure Storage. When the network rule set is restricted to selected virtual networks or IP addresses, these services can reach the storage account only if the option "Allow trusted Microsoft services to access this storage account" is enabled. Adding App Service outbound IP addresses or creating a service endpoint does not help the platform services, and disabling public network access would block all traffic.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What are trusted Microsoft services in Azure?
Open an interactive chat with Bash
How does enabling service endpoint for Microsoft.Storage differ from allowing trusted Microsoft services?
Open an interactive chat with Bash
What happens if public network access is disabled for the storage account?
Open an interactive chat with Bash
Microsoft Azure Security Engineer Associate AZ-500
Secure networking
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .