AZ-700 · Question #176
You have an Azure subscription that contains the resources shown in the following table. You need to ensure that VM1 and VM2 can connect only to storage1. The solution must meet the following…
The correct answer is B. a service endpoint policy. Virtual Network (VNet) service endpoint policies allow you to filter egress virtual network traffic to Azure Storage accounts over service endpoint, and allow data exfiltration to only specific Azure Storage accounts. Endpoint policies provide granular access control for…
Question
You have an Azure subscription that contains the resources shown in the following table. You need to ensure that VM1 and VM2 can connect only to storage1. The solution must meet the following requirements:
- Prevent VM1 and VM2 from accessing any other storage accounts
- Ensure that storage1 is accessible from the internet.
What should you use?
Exhibit
Options
- Aa network security group (NSG)
- Ba service endpoint policy
- Ca private link
- Da private endpoint
How the community answered
(25 responses)- A12% (3)
- B80% (20)
- C4% (1)
- D4% (1)
Explanation
Virtual Network (VNet) service endpoint policies allow you to filter egress virtual network traffic to Azure Storage accounts over service endpoint, and allow data exfiltration to only specific Azure Storage accounts. Endpoint policies provide granular access control for virtual network traffic to Azure Storage when connecting over service endpoint. https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoint-policies-
Community Discussion
No community discussion yet for this question.