Your on-premises network contains a VPN gateway. You have an Azure subscription that contains the resources shown in the following table. You need to ensure that all the traffic from VM1 to storage1…

The correct answer is B. private endpoints. You can use private endpoints for your Azure Storage accounts to allow clients on a virtual network (VNet) to securely access data over a Private Link. The private endpoint uses a separate IP address from the VNet address space for each storage account service. Network traffic…

Submitted by lukas.cz· Mar 30, 2026Implement and manage virtual networking

Question

Your on-premises network contains a VPN gateway. You have an Azure subscription that contains the resources shown in the following table. You need to ensure that all the traffic from VM1 to storage1 travels across the Microsoft backbone network. What should you configure?

Exhibits

Options

AAzure Application Gateway
Bprivate endpoints
Ca network security group (NSG)
DAzure Virtual WAN

How the community answered

(32 responses)

A
13% (4)
B
75% (24)
C
3% (1)
D
9% (3)

Explanation

You can use private endpoints for your Azure Storage accounts to allow clients on a virtual network (VNet) to securely access data over a Private Link. The private endpoint uses a separate IP address from the VNet address space for each storage account service. Network traffic between the clients on the VNet and the storage account traverses over the VNet and a private link on the Microsoft backbone network, eliminating exposure from the public internet. Link: https://learn.microsoft.com/en-us/azure/storage/common/storage-private-endpoints

Topics

#private endpoints#storage networking#Microsoft backbone#VPN gateway

Community Discussion

No community discussion yet for this question.

Full AZ-104 Practice