AZ-500 Question #521: Real Exam Question with Answer & Explanation

Question

You have an Azure subscription that contains an Azure Data Lake Storage account named sa1. You plan to deploy an app named App1 that will access sa1 and perform operations, including Read, List, Create Directory, and Delete Directory. You need to ensure that App1 can connect securely to sa1 by using a private endpoint. What is the minimum number of private endpoints required for sa1?

Options

• A1
• B2
• C3
• D4
• E5

Explanation

To securely connect an app to an Azure Data Lake Storage Gen2 account using a private endpoint for both data and hierarchical namespace operations, two private endpoints are required.

Common mistakes.

• A. A single private endpoint would only cover either blob data operations (Read, List) or hierarchical namespace operations (Create Directory, Delete Directory) privately, but not both simultaneously.
• C. There are no additional distinct private endpoint sub-resources required beyond 'blob' and 'dfs' for the operations specified on an Azure Data Lake Storage Gen2 account.
• D. There are no additional distinct private endpoint sub-resources required beyond 'blob' and 'dfs' for the operations specified on an Azure Data Lake Storage Gen2 account.
• E. There are no additional distinct private endpoint sub-resources required beyond 'blob' and 'dfs' for the operations specified on an Azure Data Lake Storage Gen2 account.

Concept tested. Data Lake Storage Gen2 private endpoint sub-resources

Reference. https://learn.microsoft.com/azure/data-lake-storage/data-lake-storage-network-security#private-endpoints

No community discussion yet for this question.