You have an Azure Storage account named storage1. You enable a service endpoint for Microsoft.Storage on a subnet named SubnetA. You need to ensure that only virtual machines in SubnetA can access storage1. What should you configure on storage1?

Add a firewall rule that allows the public IP range of SubnetA.

Add a virtual-network rule that allows SubnetA and set the default action to Deny.

Create a private endpoint for storage1 in SubnetA and delete the public endpoint.

Set the storage account's network access to 'All networks' and rely on the service endpoint policy.

After enabling a service endpoint on a subnet, what must you also configure on the Azure service to restrict access to that subnet?

A virtual network rule or firewall rule that allows the subnet

What is the effect of adding a virtual network rule to an Azure Storage account that references a subnet with a service endpoint enabled?

It allows all traffic from the entire virtual network to the storage account

It denies all traffic to the storage account from the internet

It assigns a private IP address to the storage account

It allows traffic from the specified subnet to the storage account

Which Azure resource must you configure to enable a service endpoint for a subnet?

The Azure service's firewall rules

The virtual network's DNS settings

The subnet in the virtual network

You have enabled a service endpoint for Azure Storage on a subnet. You want to ensure that only the subnet can access the storage account. What must you also do in the storage account's configuration?

Change the storage account's access tier to 'Hot'.

Add the subnet to the storage account's virtual network rules.

Create a shared access signature (SAS) token for the subnet.

Enable the 'Allow trusted Microsoft services' setting.

Microsoft Certified:Azure Network Engineer Associate

Domain 4Objective 2

Design and Implement Service Endpoints AZ-700 Practice Questions (Page 5)

Part of the Design and implement private access to Azure services domain, which accounts for 10–15% of the AZ-700 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~4–10 in this domain), expect 2–5 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

5concepts

10–15%of the exam

Questions 21–25

21application · medium
You have an Azure Storage account named storage1. You enable a service endpoint for Microsoft.Storage on a subnet named SubnetA. You need to ensure that only virtual machines in SubnetA can access storage1. What should you configure on storage1?
Select an answer first
22foundation · easy
After enabling a service endpoint on a subnet, what must you also configure on the Azure service to restrict access to that subnet?
Select an answer first
23foundation · easy
What is the effect of adding a virtual network rule to an Azure Storage account that references a subnet with a service endpoint enabled?
Select an answer first
24foundation · easy
Which Azure resource must you configure to enable a service endpoint for a subnet?
Select an answer first
25application · medium
You have enabled a service endpoint for Azure Storage on a subnet. You want to ensure that only the subnet can access the storage account. What must you also do in the storage account's configuration?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to AZ-700

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-700” is a trademark of its owner, used for identification only.