Design and Implement Service Endpoints AZ-700 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the purpose of a service endpoint policy?

   • ATo define which virtual networks can use a service endpoint
   • BTo encrypt traffic between the subnet and the Azure service
   • CTo automatically scale the Azure service based on demand
   • DTo allow or deny specific Azure service instances from a subnet that uses a service endpoint
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which benefit is provided by using a service endpoint for an Azure service?

   • AIt removes the need for network security groups on the subnet
   • BIt ensures the Azure service is accessible only from the virtual network's private IP address space
   • CIt automatically scales the Azure service to match the virtual network's demand
   • DIt improves the reliability and security of traffic by keeping it on the Azure backbone network
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which Azure service supports service endpoint policies?

   • AAzure Cosmos DB
   • BAzure SQL Database
   • CAzure Key Vault
   • DAzure Storage
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company has a VNet with a subnet named AppSubnet. They enable a service endpoint for Microsoft.Storage on AppSubnet. They need to ensure that only the storage account named 'finance-data' can be accessed from AppSubnet. All other storage accounts must be blocked. What should you configure?

   • ACreate a service endpoint policy on AppSubnet that allows only the resource ID of 'finance-data' and associate it with the subnet.
   • BConfigure a route table on AppSubnet with a route to the storage service for only 'finance-data'.
   • CSet the storage account's firewall to 'Selected networks' and add the AppSubnet's IP range.
   • DAdd a network rule on 'finance-data' that allows AppSubnet and deny all other network rules.
   Reveal Solution Discussion Select an answer first
6. 10expert · medium

   A company is designing a new VNet for a multi-tier application. The web tier needs to access Azure Storage, and the database tier needs to access Azure SQL Database. They want to minimize the number of public endpoints and reduce the attack surface. They also want to avoid the complexity of Private Endpoints. What is the best approach?

   • AUse a single service endpoint for both services on all subnets.
   • BEnable service endpoints on the VNet, not on subnets.
   • CEnable service endpoints for Microsoft.Storage and Microsoft.Sql on the respective subnets, and configure the services' firewalls to allow only those subnets.
   • DUse Private Endpoints for both services, even though they want to avoid complexity.
   Reveal Solution Discussion Select an answer first