Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft Exam AZ-700 Topic 7 Question 60 Discussion

Actual exam question for Microsoft's AZ-700 exam
Question #: 60
Topic #: 7
[All AZ-700 Questions]

You have an Azure subscription that contains the resources shown in the following table.

You need to ensure that VM1 and VM2 can connect only to storage1. The solution must meet the following requirements:

* Prevent VM1 and VM2 from accessing any other storage accounts.

* Ensure that storage1 is accessible from the internet.

What should you use?

Show Suggested Answer Hide Answer
Suggested Answer: A

Here are the steps and explanations for ensuring that requests for wwwjelecloud.com from any of your Azure virtual networks resolve to frontdoor1.azurefd.net:

To use a custom domain with your Azure Front Door, you need to create a CNAME record with your domain provider that points to the Front Door default frontend host. A CNAME record is a type of DNS record that maps a source domain name to a destination domain name1.

To create a CNAME record, you need to sign in to your domain registrar's website and go to the page for managing DNS settings1.

Create a CNAME record with the following information1:

Source domain name: wwwjelecloud.com

Destination domain name: frontdoor1.azurefd.net

Save your changes and wait for the DNS propagation to take effect1.

To verify the custom domain, you need to go to the Azure portal and select your Front Door profile. Then select Domains under Settings and select Add2.

On the Add a domain page, select Non-Azure validated domain as the Domain type and enter wwwjelecloud.com as the Domain name. Then select Add2.

On the Domains page, select wwwjelecloud.com and select Verify. This will check if the CNAME record is correctly configured2.

Once the domain is verified, you can associate it with your Front Door endpoint. On the Domains page, select wwwjelecloud.com and select Associate endpoint. Then select your Front Door endpoint from the drop-down list and select Associate2.


by Lettie at May 19, 2024, 10:37 PM

Limited Time Offer

25%

Off

Get Premium AZ-700 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Skye
21 days ago
Guess I'll have to 'link' up my knowledge to answer this one correctly. No 'endpoint' in sight, but I'm sure I can 'service' the question well enough.
upvoted 0 times
...
Fletcher
22 days ago
C is the way to go! A private link is like a VIP pass to storage1, no more crashing the party at other storage accounts.
upvoted 0 times
...
Peggy
1 months ago
Hmm, I'm leaning towards D. A service endpoint policy could be a good way to restrict VM1 and VM2 to only accessing storage1.
upvoted 0 times
Lyda
8 days ago
I think A) a network security group (NSG) would be a better option to restrict access to storage1 for VM1 and VM2.
upvoted 0 times
...
...
Gilbert
1 months ago
I'm not sure about this one. Could it be B? A private endpoint might work too, right?
upvoted 0 times
Ressie
23 days ago
A) a network security group (NSG)
upvoted 0 times
...
...
Geoffrey
1 months ago
I think the answer is C. A private link would allow VM1 and VM2 to connect to storage1 without accessing any other storage accounts, and it would also ensure that storage1 is accessible from the internet.
upvoted 0 times
Monte
19 days ago
That's true, but a private link specifically focuses on connecting to a specific resource like storage1 while also allowing internet access.
upvoted 0 times
...
Brinda
29 days ago
But wouldn't A) a network security group (NSG) also help in restricting access to only storage1 for VM1 and VM2?
upvoted 0 times
...
Aileen
1 months ago
I agree with you, C) a private link seems like the best option for this scenario.
upvoted 0 times
...
...
Doyle
2 months ago
But wouldn't a private endpoint be a better option to ensure secure communication?
upvoted 0 times
...
King
2 months ago
I agree, NSG can help us control the traffic to the storage accounts.
upvoted 0 times
...
Rochell
2 months ago
I think we should use a network security group (NSG) to restrict access.
upvoted 0 times
...

Save Cancel