AZ-500 · Question #186
Hotspot Question You have an Azure subscription that contains the virtual machines shown in the following table. Subnet1 and Subnet2 have a Microsoft.Storage service endpoint configured. You have an…
The correct answer is From VM1, you can upload a blob to storageacc1. = Yes; From VM2, you can upload a blob to storageacc1. = No; From VM3, you can upload a blob to storageacc1. = No. The storage account (storageacc1) is configured with a firewall that restricts access to specific virtual networks - Subnet1 with the Microsoft.Storage service endpoint. VM1 resides in Subnet1, which is explicitly allowed, so it can upload blobs. VM2 is in Subnet2, which has…
Question
Exhibits
Answer Area
- From VM1, you can upload a blob to storageacc1.Yes
- From VM2, you can upload a blob to storageacc1.No
- From VM3, you can upload a blob to storageacc1.No
Explanation
The storage account (storageacc1) is configured with a firewall that restricts access to specific virtual networks - Subnet1 with the Microsoft.Storage service endpoint. VM1 resides in Subnet1, which is explicitly allowed, so it can upload blobs. VM2 is in Subnet2, which has the service endpoint configured but is NOT listed as an allowed network in the storage account firewall, so access is denied. VM3 is in a subnet with no service endpoint configured at all, and since the storage account denies access from all networks except the explicitly allowed ones, VM3 is also blocked.
Topics
Community Discussion
No community discussion yet for this question.