MENU
You have an Azure subscription that contains the resources shown in the following table.
You need to ensure that VM1 and VM2 can connect only to storage1. The solution must meet the following requirements:
* Prevent VM1 and VM2 from accessing any other storage accounts.
* Ensure that storage1 is accessible from the internet.
What should you use?
Suggested Answer: D
Get Premium AZ-700 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
30 comments · newest first
KA
Karon
6 months ago
I feel like option C, a private link, could also be a good choice.
IS
Isabelle
6 months ago
NSG might not fully meet the internet access requirement.
MA
Madalyn
7 months ago
But what about the NSG? It can restrict access too.
PA
Paulina
7 months ago
I agree with Fannie. A private endpoint ensures secure access.
SI
Silva
7 months ago
I’m leaning towards option D, a service endpoint policy. It seems to fit the requirements.
LI
Lindsey
7 months ago
Wait, can storage1 really be accessible from the internet with these options?
ON
Onita
7 months ago
Totally agree with NSG for this scenario!
ID
Idella
8 months ago
Isn't a service endpoint policy more suitable for this?
IV
Ivette
8 months ago
I think a private endpoint is the way to go!
AR
Aracelis
8 months ago
Haha, I bet the correct answer is hidden in the image somewhere. Time to put on my detective hat!
TR
Tresa
8 months ago
The question is pretty straightforward. I'd go with C) a private link.
BR
Bronwyn
9 months ago
D) a service endpoint policy could work, but I'm not sure it would allow storage1 to be accessible from the internet.
WI
Willard
9 months ago
B) a private endpoint would be a good choice to restrict access to storage1.
LA
Lawanda
9 months ago
I feel like a service endpoint policy could help with controlling access, but I’m not confident if it meets the requirement to allow internet access to storage1.
LA
Lai
9 months ago
I'm a bit confused about the difference between a private link and a private endpoint. I feel like one of them might be the answer, but I can't recall the specifics.
LO
Lou
9 months ago
I think we might need to use a network security group to restrict access, but I'm not entirely sure if that's the best option for this scenario.
AL
Alica
9 months ago
Okay, I think I've got it. A private link would be the way to go to restrict the VMs to only storage1, and then a private endpoint could be used to expose that storage account to the internet. That seems like it would meet all the requirements. I'll make sure to review the specifics of each option, but that's the approach I'm leaning towards.
GA
Gabriele
10 months ago
I'm a bit confused on the differences between the options. Is a service endpoint policy a viable solution here too? I'll need to review the details of each one to determine the best approach. The key is finding a way to restrict the VMs while still allowing public access to the storage account.
BR
Brunilda
10 months ago
Okay, let me think this through. Private link would create a private connection between the VMs and the storage account, which would meet the first requirement. And a private endpoint could then be used to expose the storage account to the internet, while still keeping it private. I think that combination of private link and private endpoint might be the way to go here.
JU
Jules
10 months ago
A network security group (NSG) can restrict access.
DE
Dean
10 months ago
C) a private link seems like the way to go here.
EL
Elfrieda
11 months ago
I remember practicing a similar question where we had to limit access to storage accounts. I think a private endpoint could be the right choice here.
FA
Fannie
11 months ago
This question is tricky! I think a private endpoint could work.
LE
Lettie
11 months ago
Hmm, this is a tricky one. I'm not totally sure about the differences between private link and private endpoint. I'll need to review those options carefully to see which one best meets the requirements. Restricting access while still allowing internet access seems like the key challenge here.
AU
Augustine
11 months ago
I think I would start by considering the requirements - we need to restrict VM1 and VM2 to only access storage1, but also make storage1 accessible from the internet. A network security group (NSG) could work for the first part, but it wouldn't help with the internet access. I'm leaning towards a private link or private endpoint solution.
RA
Raymon
6 months ago
I think a service endpoint policy could balance both needs.
LA
Lai
6 months ago
True, but we need to ensure internet access too.
LA
Laila
6 months ago
But isn't a private endpoint more straightforward for this scenario?
VA
Valentine
6 months ago
Private link seems like a solid choice for security.
SO
Sophia
10 months ago
I agree, NSG won't allow internet access.