Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft AZ-700 Exam - Topic 2 Question 90 Discussion

Actual exam question for Microsoft's AZ-700 exam
Question #: 90
Topic #: 2
[All AZ-700 Questions]

You have an Azure subscription that contains the resources shown in the following table.

You need to ensure that VM1 and VM2 can connect only to storage1. The solution must meet the following requirements:

* Prevent VM1 and VM2 from accessing any other storage accounts.

* Ensure that storage1 is accessible from the internet.

What should you use?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Hillary at Nov 20, 2025, 10:53 AM

Limited Time Offer

25%

Off

Get Premium AZ-700 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Karon
1 month ago
I feel like option C, a private link, could also be a good choice.
upvoted 0 times
...
Isabelle
1 month ago
NSG might not fully meet the internet access requirement.
upvoted 0 times
...
Madalyn
2 months ago
But what about the NSG? It can restrict access too.
upvoted 0 times
...
Paulina
2 months ago
I agree with Fannie. A private endpoint ensures secure access.
upvoted 0 times
...
Silva
2 months ago
I’m leaning towards option D, a service endpoint policy. It seems to fit the requirements.
upvoted 0 times
...
Lindsey
2 months ago
Wait, can storage1 really be accessible from the internet with these options?
upvoted 0 times
...
Onita
2 months ago
Totally agree with NSG for this scenario!
upvoted 0 times
...
Idella
3 months ago
Isn't a service endpoint policy more suitable for this?
upvoted 0 times
...
Ivette
3 months ago
I think a private endpoint is the way to go!
upvoted 0 times
...
Aracelis
3 months ago
Haha, I bet the correct answer is hidden in the image somewhere. Time to put on my detective hat!
upvoted 0 times
...
Tresa
3 months ago
The question is pretty straightforward. I'd go with C) a private link.
upvoted 0 times
...
Bronwyn
4 months ago
D) a service endpoint policy could work, but I'm not sure it would allow storage1 to be accessible from the internet.
upvoted 0 times
...
Willard
4 months ago
B) a private endpoint would be a good choice to restrict access to storage1.
upvoted 0 times
...
Lawanda
4 months ago
I feel like a service endpoint policy could help with controlling access, but I’m not confident if it meets the requirement to allow internet access to storage1.
upvoted 0 times
...
Lai
4 months ago
I'm a bit confused about the difference between a private link and a private endpoint. I feel like one of them might be the answer, but I can't recall the specifics.
upvoted 0 times
...
Lou
4 months ago
I think we might need to use a network security group to restrict access, but I'm not entirely sure if that's the best option for this scenario.
upvoted 0 times
...
Alica
5 months ago
Okay, I think I've got it. A private link would be the way to go to restrict the VMs to only storage1, and then a private endpoint could be used to expose that storage account to the internet. That seems like it would meet all the requirements. I'll make sure to review the specifics of each option, but that's the approach I'm leaning towards.
upvoted 0 times
...
Gabriele
5 months ago
I'm a bit confused on the differences between the options. Is a service endpoint policy a viable solution here too? I'll need to review the details of each one to determine the best approach. The key is finding a way to restrict the VMs while still allowing public access to the storage account.
upvoted 0 times
...
Brunilda
5 months ago
Okay, let me think this through. Private link would create a private connection between the VMs and the storage account, which would meet the first requirement. And a private endpoint could then be used to expose the storage account to the internet, while still keeping it private. I think that combination of private link and private endpoint might be the way to go here.
upvoted 0 times
...
Jules
5 months ago
A network security group (NSG) can restrict access.
upvoted 0 times
...
Dean
5 months ago
C) a private link seems like the way to go here.
upvoted 0 times
...
Elfrieda
6 months ago
I remember practicing a similar question where we had to limit access to storage accounts. I think a private endpoint could be the right choice here.
upvoted 0 times
...
Fannie
6 months ago
This question is tricky! I think a private endpoint could work.
upvoted 0 times
...
Lettie
6 months ago
Hmm, this is a tricky one. I'm not totally sure about the differences between private link and private endpoint. I'll need to review those options carefully to see which one best meets the requirements. Restricting access while still allowing internet access seems like the key challenge here.
upvoted 0 times
...
Augustine
6 months ago
I think I would start by considering the requirements - we need to restrict VM1 and VM2 to only access storage1, but also make storage1 accessible from the internet. A network security group (NSG) could work for the first part, but it wouldn't help with the internet access. I'm leaning towards a private link or private endpoint solution.
upvoted 0 times
Raymon
18 days ago
I think a service endpoint policy could balance both needs.
upvoted 0 times
...
Lai
24 days ago
True, but we need to ensure internet access too.
upvoted 0 times
...
Laila
29 days ago
But isn't a private endpoint more straightforward for this scenario?
upvoted 0 times
...
Valentine
1 month ago
Private link seems like a solid choice for security.
upvoted 0 times
...
Sophia
5 months ago
I agree, NSG won't allow internet access.
upvoted 0 times
...
...

Save Cancel