Which scenario is NOT suitable for using a service endpoint?

A subnet needs to access Azure Cosmos DB in the same region

A virtual network in one region needs to access an Azure SQL database in a different region

A virtual machine in a subnet needs to access an Azure Storage account in the same region

A subnet needs to access an Azure Key Vault in the same region

A developer wants to access Azure Cosmos DB from a VM in a VNet without going over the public internet. The VM is in a subnet called 'app'. What is the first step they must take?

Enable the Microsoft.AzureCosmosDB service endpoint on the 'app' subnet.

Add a route table to the subnet with a route to Cosmos DB's service tag.

Assign a public IP to the VM and configure an NSG to allow Cosmos DB.

Create a private DNS zone for Cosmos DB and link it to the VNet.

A company is planning to use service endpoints to secure access to Azure SQL Database from their VNet. They want to ensure that traffic from the VNet to SQL Database does not go over the public internet. What is the primary benefit of using a service endpoint for this purpose?

The SQL Database server gets a private IP address in the VNet.

SQL Database becomes part of the VNet.

Traffic from the VNet to SQL Database is routed over the Microsoft backbone network.

The VNet is connected to SQL Database using a VPN tunnel.

A company has a VNet with a subnet that has a service endpoint for Microsoft.Storage enabled. They create a service endpoint policy that allows only storage account 'A'. Later, they need to allow access to storage account 'B' as well. What should they do?

Add a virtual-network rule on storage account 'B' that allows the subnet.

Edit the existing service endpoint policy and add the resource ID of storage account 'B' to the allowed resources list.

Create a new service endpoint policy for storage account 'B' and associate it with the subnet.

Remove the service endpoint policy and rely on the storage account's firewall rules.

What is the primary purpose of a service endpoint in Azure?

To allow a virtual network to access an Azure service over the Azure backbone network while keeping the service's public endpoint

To encrypt all traffic between a virtual network and an Azure service

To provide a dedicated private IP address for an Azure service within a virtual network

To create a fully private connection between a virtual network and an Azure service using a private IP address

Microsoft Certified:Azure Network Engineer Associate

Domain 4Objective 2

Design and Implement Service Endpoints AZ-700 Practice Questions (Page 4)

Part of the Design and implement private access to Azure services domain, which accounts for 10–15% of the AZ-700 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~4–10 in this domain), expect 2–5 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

5concepts

10–15%of the exam

Questions 16–20

16foundation · easy
Which scenario is NOT suitable for using a service endpoint?
Select an answer first
17application · easy
A developer wants to access Azure Cosmos DB from a VM in a VNet without going over the public internet. The VM is in a subnet called 'app'. What is the first step they must take?
Select an answer first
18application · medium
A company is planning to use service endpoints to secure access to Azure SQL Database from their VNet. They want to ensure that traffic from the VNet to SQL Database does not go over the public internet. What is the primary benefit of using a service endpoint for this purpose?
Select an answer first
19expert · hard
A company has a VNet with a subnet that has a service endpoint for Microsoft.Storage enabled. They create a service endpoint policy that allows only storage account 'A'. Later, they need to allow access to storage account 'B' as well. What should they do?
Select an answer first
20foundation · easy
What is the primary purpose of a service endpoint in Azure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-700

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-700” is a trademark of its owner, used for identification only.