You have an Azure subscription that contains the resources shown in the following table. You need to ensure that data transfers between storage1 and VM1 do NOT traverse the internet What should you…

The correct answer is B. a private endpoint. To ensure that all the traffic from VM1 to storage1 travels across the Microsoft backbone network without going out to the public internet, you should use a private endpoint. A private endpoint uses a private IP address from your VNet, effectively bringing the service into your…

Submitted by anjalisingh· Mar 4, 2026Implement and manage storage

Question

You have an Azure subscription that contains the resources shown in the following table. You need to ensure that data transfers between storage1 and VM1 do NOT traverse the internet What should you configure for storage1?

Options

Adata protection
Ba private endpoint
CPublic network access in the Firewalls and virtual networks settings
Da shared access signature (SAS)

How the community answered

(21 responses)

A
5% (1)
B
76% (16)
C
5% (1)
D
14% (3)

Explanation

To ensure that all the traffic from VM1 to storage1 travels across the Microsoft backbone network without going out to the public internet, you should use a private endpoint. A private endpoint uses a private IP address from your VNet, effectively bringing the service into your VNet. Any traffic between your virtual machine and the storage account will traverse over the VNet and stay on the Microsoft backbone network, without ever leaving it. https://learn.microsoft.com/en-us/azure/storage/common/storage-private-endpoints

Community Discussion

No community discussion yet for this question.

Full AZ-104 Practice