Discuss Microsoft AZ-700 Exam Topic 11 Question 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription that contains the following resources:

* A virtual network named Vnet1

* A subnet named Subnet1 in Vnet1

* A virtual machine named VM1 that connects to Subnet1

* Three storage accounts named storage1, storage2. and storage3

You need to ensure that VM1 can access storage1. VM1 must be prevented from accessing any other storage accounts.

Solution: You create a network security group (NSG). You configure a service tag for MicrosoftStorage and link the tag to Subnet1.

Does this meet the goal?

AYes

BNo

Suggested Answer: A

Get Premium AZ-700 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Jenifer 12 months ago

Service tags are great, but they don't limit access like that.

Samuel 1 year ago

I think it meets the goal, but I'm not sure about the specifics.

Stephen 1 year ago

Wait, so VM1 can still access other storage accounts?

Shay 1 year ago

Totally agree, that won't work as intended.

Desire 1 year ago

NSG with service tag won't restrict access to just one storage account.

Iraida 1 year ago

I’m a bit confused about how service tags work. If they open access to all Microsoft Storage services, then this solution wouldn’t meet the requirement, right?

Willis 1 year ago

I remember a practice question where we had to restrict access to specific resources. I feel like just using an NSG with a service tag isn't enough to limit VM1 to only storage1.

Anglea 1 year ago

I think using a service tag for MicrosoftStorage might allow access to all storage accounts, not just storage1. I'm not sure if this meets the goal.

Kaitlyn 1 year ago

I believe we might need to set up specific rules in the NSG to allow access to storage1 only. The service tag approach seems too broad for this scenario.

Aleta 1 year ago

I've got this one! Brainstorming is all about coming up with lots of ideas, even if some of them are a bit crazy or unrealistic. That's what option A is describing, so I'm confident that's the right answer.

Tamar 1 year ago

I'm not too familiar with Splunk's disk storage requirements. I'll need to read the question closely and try to reason through the best approach.

Alva 1 year ago

I remember a similar question discussing roles within a company. I want to say that option A seems likely, but maybe B could make sense too?

Microsoft AZ-700 Exam - Topic 11 Question 1 Discussion