Designing and Implementing Microsoft Azure Networking Solutions AZ-700 — Topic 5 Question 338

Question

You have an on-premises network named Site1. You have an Azure subscription that contains a storage account named storage1 and a virtual network named VNet1. VNet1 contains a subnet named Subnet1. A private endpoint for storage1 is connected to Subnet1. Site1 is connected to VNet1 by using a Site-to-Site (S2S) VPN. You need to control access to storage1 from Site1 by using network security groups (NSGs), What should you do first?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Configure a network policy for private endpoints on Subnet1. A Private Endpoint gives private, in-VNet connectivity to an Azure service, keeping traffic off the public internet.

Designing and Implementing Microsoft Azure Networking Solutions AZ-700 — Question 338