nerdexam
Microsoft

AZ-700 · Question #351

You have an on-premises network named Site1. You have an Azure subscription that contains a storage account named storage1 and a virtual network named VNet1. VNet1 contains a subnet named Subnet1. A…

The correct answer is A. Configure a network policy for private endpoints on Subnet1. This setting only applies to private endpoints in the subnet and affects all private endpoints in the subnet. For other resources in the subnet, access is controlled based on security rules in the network security group…

Submitted by dimitri_ru· Apr 18, 2026

Question

You have an on-premises network named Site1. You have an Azure subscription that contains a storage account named storage1 and a virtual network named VNet1. VNet1 contains a subnet named Subnet1. A private endpoint for storage1 is connected to Subnet1. Site1 is connected to VNet1 by using a Site-to-Site (S2S) VPN. You need to control access to storage1 from Site1 by using network security groups (NSGs), What should you do first?

Options

  • AConfigure a network policy for private endpoints on Subnet1.
  • BCreate a subnet delegation on Subnet1.
  • CAssociate a route table with Subnet1.
  • DAssociate a NAT gateway with Subnet1.

How the community answered

(21 responses)
  • A
    81% (17)
  • B
    5% (1)
  • C
    5% (1)
  • D
    10% (2)

Explanation

This setting only applies to private endpoints in the subnet and affects all private endpoints in the subnet. For other resources in the subnet, access is controlled based on security rules in the network security group. https://learn.microsoft.com/en-us/azure/private-link/disable-private-endpoint-network- policy?tabs=network-policy-portal

Community Discussion

No community discussion yet for this question.

Full AZ-700 Practice