AZ-140 · Question #355
Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets…
The correct answer is A. Yes. You add a private endpoint to storage1. To connect Azure Virtual Desktop (AVD) session hosts to an Azure Files share over the Microsoft backbone, deploy a Private Endpoint for the Azure Storage account within the same virtual network (or a peered virtual network) as your…
Question
Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen. You have an Azure subscription that contains a virtual network named VNet1, a storage account named storage1, and five Azure Virtual Desktop session hosts. VNet1 and storage1 are in the East US Azure region. The session hosts are connected to VNet1. In storage1, you create an Azure Files share named share1. You need to ensure that the session hosts connect to share1 by using the Microsoft backbone network. Solution: You add a service endpoint to VNet1. Does this meet the goal?
Options
- AYes
- BNo
How the community answered
(44 responses)- A84% (37)
- B16% (7)
Explanation
- You add a private endpoint to storage1. To connect Azure Virtual Desktop (AVD) session hosts to an Azure Files share over the Microsoft backbone, deploy a Private Endpoint for the Azure Storage account within the same virtual network (or a peered virtual network) as your session hosts. This directs all network traffic from your session hosts to the Azure Files share via Azure's private network, bypassing the public internet and leveraging the Microsoft backbone for improved security and performance. * You add a service endpoint to VNet1. Azure virtual network service endpoints provide a way to connect Azure Virtual Desktop (AVD) session hosts to an Azure Files share securely over the Azure backbone network, allowing access without using public IP addresses. You enable this by creating a service endpoint in the virtual network (VNet) that your AVD hosts reside in, which directs traffic to Azure Storage accounts like Azure Files directly through the Azure backbone. Note: A Private Endpoint assigns a private IP from your virtual network (VNet) to an Azure service, keeping all traffic within the Microsoft backbone and providing complete isolation. In contrast, a Service Endpoint provides secure, optimized connectivity to Azure services over the Azure backbone but still directs traffic to the service's public IP address, which exits your VNet. Private Endpoints offer greater security and flexibility, while Service Endpoints are simpler to configure but less secure due to the public IP aspect. * You configure network peering for Vnet1. * You create a routing table and assign the table to Vnet1. https://learn.microsoft.com/en-us/azure/virtual-desktop/private-link-overview https://learn.microsoft.com/en-us/azure/storage/files/storage-files-networking-endpoints
Community Discussion
No community discussion yet for this question.