Exam AZ-140 All Questions

View all questions & answers for the AZ-140 exam

Exam AZ-140 topic 6 question 3 discussion

Actual exam question from Microsoft's AZ-140

Question #: 3
Topic #: 6

HOTSPOT -

You have an Azure subscription that contains the resources shown in the following table.

You have a virtual machine named Server1 that runs Windows Server and is connected to VNet3.

You need to deploy the Azure Virtual Desktop host pools shown in the following table.

The solution must meet the following requirements:

• The session hosts in Pool1 must access Server1 via the Microsoft backbone network.
• The session hosts in Pool2 must access storage1 via the Microsoft backbone network.

What should you configure on the virtual networks? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by Leocan at June 3, 2023, 10:27 p.m.

Comments

Submit Cancel

Leocan

Highly Voted 2 years, 1 month ago

The service endpoint is not for a Windows server. Peering is the answer. https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overview Pool2 in vNet2 (West US) must access storage 1 in East US (with vNet1). A private endpoint is for the storage account.

upvoted 15 times

Roee1

7 months, 1 week ago

Vnet1 is peering vnet 2 is service endpoint private endpoint would work if the storage account would be in the same region as the vnet, but to use private endpoint in this case you would need to create a new vnet and peer it, and because of that service enpoint make more sense since it supports connetion from a different region

upvoted 3 times

...

hawkens

1 year ago

Are you sure? Virtual network peering: Connecting virtual networks within the same Azure region. vnet1 is not in the same azure region as vnet3

upvoted 1 times

Roee1

7 months, 1 week ago

vnet peering support cross region vnets

upvoted 1 times

...

zapi

Most Recent 4 months, 1 week ago

The answer to Vnet 1 is Cross-Region Peering The answer to Vnet2 is Service Endpoint, which is NOT public. When you enable a service endpoint, it provides secure and direct connectivity to Azure services over the Azure backbone network. This means that the traffic between your virtual network (VNet) and the Azure service remains within the Azure network and does not traverse the public internet.

upvoted 1 times

...

jeff1988

8 months, 1 week ago

Vnet1 - virtual network peering Vnet2 - service endpoint

upvoted 3 times

...

slimeycat

10 months, 1 week ago

Peering Private endpoint - Must be routed via backbone, service publicly routable https://learn.microsoft.com/en-us/answers/questions/1638218/confusion-on-service-endpoint-and-private-endpoint

upvoted 2 times

...

hawkens

1 year ago

I believe the correct answer is not provided for vnet1: There are three options to achieve this connection between vnet1 and vnet3, which we’ll discuss in this post: Global VNET peering VNET-to-VNET connection Expressroute

upvoted 1 times

...

makonmakon

1 year, 4 months ago

The private endpoint must be deployed in the same region and subscription as the virtual network. So, service endpoint https://learn.microsoft.com/en-us/azure/private-link/private-endpoint-overview

upvoted 3 times

makonmakon

1 year, 4 months ago

for VNET2 of course. for VNET1 is peering the answer

upvoted 1 times

...

matanzpl

1 year, 5 months ago

for private endpoint you would need Vnet peering, privateDNS zone and DNS server set on both Vnets service endpoint is less admin and runs on MS backbone 1 - peering 2 - service endpoint

upvoted 1 times

...

RDIO

1 year, 9 months ago

Peering and Private Endpoint for me... It must go through the Microsoft Backbone and a service endpoint remains a publicly routable IP. https://learn.microsoft.com/en-us/azure/private-link/private-link-faq#what-is-the-difference-between-service-endpoints-and-private-endpoints-:~:text=What%20is%20the,endpoint%20is%20configured.

upvoted 3 times

DC095

3 months, 1 week ago

Service endpoint traffic still traverses the Microsoft backbone to reach the public endpoint of an azure service.

upvoted 1 times

...

vipjason

1 year, 9 months ago

vNet1 need network peerinng. vNet2 needs a service endpoint to the storage account. I wonder how long it will take for the moderator to moderate my answers.

upvoted 1 times

...

c7d45f4

1 year, 10 months ago

For VNet1: Virtual Network peering (to connect with VNet3) For VNet2: A Service Endpoint for Microsoft.Storage (to access storage1) There is no need for private endpoints or VPN gateways based on the requirements have here

upvoted 4 times

...

groox

1 year, 11 months ago

VNet2 should be a service endpoint. Cross-region service endpoints for Azure Storage became generally available in April 2023

upvoted 2 times

...

LekkerZomer

1 year, 11 months ago

"The traffic between virtual machines in peered virtual networks uses the Microsoft backbone infrastructure" Azure supports the following types of peering: -Virtual network peering: Connecting virtual networks within the same Azure region. -Global virtual network peering: Connecting virtual networks across Azure regions.

upvoted 1 times

...