MENU
You have an on-premises network named Site1.
You have an Azure subscription that contains a storage account named storage1 and a virtual network named VNet1. VNet1 contains a subnet named Subnet1. A private endpoint for storage1 is connected to Subnet1 Site1 is connected to VNet1 by using a Site-to-Site (S2S) VPN.
You need to control access to storage1 from Site1 by using network security groups (NSGs).
What should you do first?
Suggested Answer: C
Get Premium AZ-700 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
31 comments · newest first
SH
Shenika
10 months ago
Subnet delegation seems unnecessary here, stick with C!
SH
Sharan
10 months ago
A route table won't help with NSGs, so C makes sense.
DE
Demetra
10 months ago
Totally agree, option C is the way to go!
MA
Maryann
11 months ago
Wait, are we sure that's the first step?
CE
Ceola
11 months ago
You need to configure a network policy for private endpoints first.
HA
Hannah
11 months ago
I feel like the NAT gateway option is not related to NSGs, but I can't recall exactly how it all fits together.
LE
Lea
11 months ago
I’m a bit confused about the options. I thought subnet delegation was important, but I’m not sure if it applies to controlling access to storage1.
SH
Shannan
11 months ago
I remember practicing a similar question where we had to set up NSGs, and I feel like associating a route table might be more relevant here.
KA
Kaycee
12 months ago
I think we need to configure a network policy for private endpoints on Subnet1, but I'm not entirely sure if that's the first step.
KA
Karima
12 months ago
I'm pretty confident that the correct answer is C. Configuring a network policy for the private endpoint on Subnet1 will allow us to control the access to the storage account from the on-premises network. The other options, like associating a route table or NAT gateway, don't seem directly relevant to the problem statement.
ME
Merrilee
12 months ago
Okay, let me think this through. Since the on-premises network is connected to the Azure VNet via a Site-to-Site VPN, we'll need to make sure the network traffic from Site1 is allowed to access the storage account. I think configuring a network policy for the private endpoint on Subnet1 might be the best place to start.
ER
Eric
1 year ago
Hmm, I'm a bit confused. The question mentions controlling access to the storage account, but it doesn't explicitly say we need to use an NSG. I'm not sure if that's the right approach or if there's something else we should be considering first.
AL
Alishia
1 year ago
I think the key here is to control access to the storage account from the on-premises network. Based on the information provided, it seems like we need to configure a network security group (NSG) on the subnet that the private endpoint is connected to.
QU
Quentin
1 year ago
Haha, B. Associate a NAT gateway? What kind of a joke is that? I'm going with C, no doubt about it.
PO
Pok
1 year ago
Hmm, I see your point. Maybe we should consider both options and evaluate which one would be more effective.
ME
Merilyn
1 year ago
I agree with Silva, setting up a route table seems like the right first step to me.
SI
Silva
1 year ago
But wouldn't associating a route table help in controlling access to storage1 from Site1?
JO
Joesph
1 year ago
This question is a piece of cake! C is definitely the correct answer. Configuring the network policy is crucial for securing the private endpoint.
MA
Maryanne
1 year ago
Definitely, C is the way to go to ensure security for the private endpoint in this scenario.
LA
Laquita
1 year ago
Agreed, setting up the network policy is key for controlling access to storage1 from Site1.
DE
Deonna
1 year ago
I think C is the right choice too. It's important to configure the network policy for private endpoints.
PO
Pok
1 year ago
I disagree, I believe we should configure a network policy for private endpoints on Subnet1.
SI
Silva
1 year ago
I think we should associate a route table with Subnet1 first.
CA
Cammy
1 year ago
B. Associate a NAT gateway with Subnet1? Really? That doesn't seem relevant to the question at all. I'm going with C.
LA
Laine
1 year ago
D. Create a subnet delegation on Subnet1 sounds like the way to go. That's probably the best way to manage the network security for the private endpoint.
KA
Kaycee
1 year ago
Yeah, that makes sense. It will help in controlling access to storage1 from Site1.
CA
Carmelina
1 year ago
I agree, creating a subnet delegation on Subnet1 seems like the right first step.
RU
Ruth
1 year ago
Hmm, I think the answer is C. Configuring a network policy for private endpoints on Subnet1 seems like the logical first step to control access to the storage account.
TA
Tamie
1 year ago
Yes, setting up the network policy for private endpoints on Subnet1 is definitely the first thing to do in this scenario.
CY
Cyril
1 year ago
I agree, that would be the best way to control access to the storage account from Site1.
KA
Kattie
1 year ago
I think you're right, configuring a network policy for private endpoints on Subnet1 is the first step.