Exam AZ-700 All Questions

View all questions & answers for the AZ-700 exam

Exam AZ-700 topic 2 question 95 discussion

Actual exam question from Microsoft's AZ-700

Question #: 95
Topic #: 2

HOTSPOT
-

You have an on-premises server named Server that is assigned a public IP address of 131.107.100.200.

You have an Azure subscription that contains the resources shown in the following table.

storage85347 has the Networking settings configured as shown in the following exhibit.

From the Firewalls and virtual networks tab, you add Subnet1 to storage85347.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by manhattan at Dec. 23, 2024, 4:42 p.m.

Comments

Submit Cancel

Silverpro29

2 months, 1 week ago

YNN "A service endpoint is created on VNet1." Answer: Yes Explanation: When you add Subnet1 to a Storage Account's network access list, and configure it to allow traffic only from selected virtual networks, Azure automatically enables a service endpoint for Microsoft.Storage on that subnet. This allows secure, direct access from VMs in that subnet to the storage account. "All the virtual machines can access storage85347." Answer: No Explanation: Only VMs in Subnet1 can access the storage account — not all VMs. - Subnet1 was added to the firewall exceptions. - VMs in Subnet2 were not added, so they cannot access the storage unless explicitly allowed. "An additional route is created automatically in the route table of Subnet1." Answer: No Explanation: - Enabling service endpoints does not create an additional user-defined route (UDR). - Instead, Azure updates of the system routes internally to direct traffic to the Azure backbone.

upvoted 1 times

...

bobothewiseman

6 months, 1 week ago

Given answers are correct

upvoted 1 times

bobothewiseman

5 months, 3 weeks ago

Answer seems YNY

upvoted 3 times

...

manhattan

7 months ago

Selected Answer: A

I's Say N,N,N 1) no service endpoint are created 2) only one IP is configured 3) An additional route is created doesn't makle sense to me, please clarify if anyone understand it better,

upvoted 4 times

KeysAU

6 months, 1 week ago

Y, N , Y The service end point is prompted to added to the vet when you add it on the storage account if its not already there. The service endpoint route gets added when you do this

upvoted 6 times

Sergovladi

6 months, 1 week ago

I agree. When a service endpoint is created for one of the subnets within a VNET, it is technically correct to say that the service endpoint is created on the VNET because VNET can be considered as a parent entity.

upvoted 1 times

Sergovladi

6 months, 1 week ago

also, have a look at the picture of GUI in Azure Storage config adduced in the question. It explicitly shows: "enable access from selected virtual networks...", not from "subnets"

upvoted 2 times

manhattan

6 months, 1 week ago

yes you guys are right, it's YNY when you enable a subnet you enable a service endpoint, tested it. tested the third answer too, it added 2 routes Default - Active - 191.235.255.192/26, 82 more - VirtualNetworkService so Y,N,Y is my final choice, thanks

upvoted 3 times

4d1c008

4 months ago

But there is no networks selected in the shown configuration. You can create with out selecting a network and it will not add any endpoints.

upvoted 2 times

...

Gambito11

6 months, 2 weeks ago

se crea un service endpoint en la subnet que se agrega al storage account pero una route automatica no, por lo tanto las respusta es N N N

upvoted 1 times

manhattan

6 months, 1 week ago

Actually I've made a test in my lab and checked the routes before adding the subnet in the storage account, it actually adds the route automatically immediately after enabling it. routes like these will be added Default - Active - 191.235.255.192/26, 82 more - VirtualNetworkService so Answer given is correct N N Y

upvoted 3 times

...