AZ-500 · Question #541
Hotspot Question You have an Azure subscription that contains the resources shown in the following table. You plan to use service endpoints and service endpoint policies. Which resources can be…
The correct answer is VM1 can be accessed by using a service endpoint. = No; storage1 can be accessed by using a service endpoint. = Yes; WebApp1 can be accessed by using a service endpoint. = Yes; VM1 supports service endpoint policies. = No; storage1 supports service endpoint policies. = Yes; WebApp1 supports service endpoint policies. = No. Azure Service Endpoints allow secure, direct connectivity from a VNet to specific Azure PaaS services like Azure Storage, Azure SQL, and Azure App Service (Web Apps), bypassing the public internet. Storage accounts and Web Apps (App Service) are both supported PaaS services…
Question
Exhibits
Answer Area
- VM1 can be accessed by using a service endpoint.No
- storage1 can be accessed by using a service endpoint.Yes
- WebApp1 can be accessed by using a service endpoint.Yes
- VM1 supports service endpoint policies.No
- storage1 supports service endpoint policies.Yes
- WebApp1 supports service endpoint policies.No
Explanation
Azure Service Endpoints allow secure, direct connectivity from a VNet to specific Azure PaaS services like Azure Storage, Azure SQL, and Azure App Service (Web Apps), bypassing the public internet. Storage accounts and Web Apps (App Service) are both supported PaaS services accessible via service endpoints, while VMs are IaaS resources that act as the source of traffic, not the destination accessed via service endpoints. Service Endpoint Policies, however, provide a more granular layer of control and are currently only supported for Azure Storage - meaning you can restrict VNet traffic to specific storage accounts - but this feature does NOT extend to Web Apps or VMs.
Topics
Community Discussion
No community discussion yet for this question.