nerdexam
Microsoft

AZ-500 · Question #319

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements…

The correct answer is B. No. Creating an Application Security Group (ASG) does not enable Docker containers on a VM to access Azure Storage and Azure SQL databases via a service endpoint.

Submitted by manish99· Mar 6, 2026Secure networking

Question

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your Company's Azure subscription includes a virtual network that has a single subnet configured. You have created a service endpoint for the subnet, which includes an Azure virtual machine that has Ubuntu Server 18.04 installed. You are preparing to deploy Docker containers to the virtual machine. You need to make sure that the containers can access Azure Storage resources and Azure SQL databases via the service endpoint. You need to perform a task on the virtual machine prior to deploying containers. Solution: You create an application security group. Does the solution meet the goal?

Options

  • AYes
  • BNo

How the community answered

(34 responses)
  • A
    15% (5)
  • B
    85% (29)

Why each option

Creating an Application Security Group (ASG) does not enable Docker containers on a VM to access Azure Storage and Azure SQL databases via a service endpoint.

AYes

ASGs do not facilitate the configuration of service endpoint access for containers; their purpose is network security grouping for VMs.

BNoCorrect

Creating an Application Security Group (ASG) is used to group VMs and define network security policies for them, but it does not directly enable or configure access from Docker containers within a VM to Azure Storage and Azure SQL databases via a service endpoint. Service endpoints are configured at the subnet level to allow direct access from that subnet to specific Azure services, and containers running on a VM within that subnet would inherently use the VM's network path.

Concept tested: Azure Service Endpoints and Application Security Groups

Source: https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-500 Practice