Microsoft AZ-700 Exam - Topic 11 Question 1 Discussion

Actual exam question for Microsoft's AZ-700 exam

Question #: 1
Topic #: 11

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription that contains the following resources:

* A virtual network named Vnet1

* A subnet named Subnet1 in Vnet1

* A virtual machine named VM1 that connects to Subnet1

* Three storage accounts named storage1, storage2. and storage3

You need to ensure that VM1 can access storage1. VM1 must be prevented from accessing any other storage accounts.

Solution: You create a network security group (NSG). You configure a service tag for MicrosoftStorage and link the tag to Subnet1.

Does this meet the goal?

AYes

BNo

Show Suggested Answer

Suggested Answer: A

by Maurine at May 07, 2022, 10:48 PM

Limited Time Offer

25%

Off

Get Premium AZ-700 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jenifer

4 months ago

Service tags are great, but they don't limit access like that.

upvoted 0 times

...

Samuel

4 months ago

I think it meets the goal, but I'm not sure about the specifics.

upvoted 0 times

...

Stephen

4 months ago

Wait, so VM1 can still access other storage accounts?

upvoted 0 times

...

Shay

5 months ago

Totally agree, that won't work as intended.

upvoted 0 times

...

Desire

5 months ago

NSG with service tag won't restrict access to just one storage account.

upvoted 0 times

...

Iraida

5 months ago

I’m a bit confused about how service tags work. If they open access to all Microsoft Storage services, then this solution wouldn’t meet the requirement, right?

upvoted 0 times

...

Willis

5 months ago

I remember a practice question where we had to restrict access to specific resources. I feel like just using an NSG with a service tag isn't enough to limit VM1 to only storage1.

upvoted 0 times

...

Anglea

5 months ago

I think using a service tag for MicrosoftStorage might allow access to all storage accounts, not just storage1. I'm not sure if this meets the goal.

upvoted 0 times

...

Kaitlyn

5 months ago

I believe we might need to set up specific rules in the NSG to allow access to storage1 only. The service tag approach seems too broad for this scenario.

upvoted 0 times

...

Aleta

5 months ago

I've got this one! Brainstorming is all about coming up with lots of ideas, even if some of them are a bit crazy or unrealistic. That's what option A is describing, so I'm confident that's the right answer.

upvoted 0 times

...

Tamar

5 months ago

I'm not too familiar with Splunk's disk storage requirements. I'll need to read the question closely and try to reason through the best approach.

upvoted 0 times

...

Alva

5 months ago

I remember a similar question discussing roles within a company. I want to say that option A seems likely, but maybe B could make sense too?

upvoted 0 times

...