Exam AZ-700 topic 5 question 34 discussion

Actual exam question from Microsoft's AZ-700

Question #: 34
Topic #: 5

You have an on-premises network named Site1.

You have an Azure subscription that contains a storage account named storage1 and a virtual network named VNet1. VNet1 contains a subnet named Subnet1. A private endpoint for storage1 is connected to Subnet1. Site1 is connected to VNet1 by using a Site-to-Site (S2S) VPN.

You need to control access to storage1 from Site1 by using network security groups (NSGs),

What should you do first?

A. Configure a network policy for private endpoints on Subnet1.
B. Create a subnet delegation on Subnet1.
C. Associate a route table with Subnet1.
D. Associate a NAT gateway with Subnet1.

Show Suggested Answer

Suggested Answer: A 🗳️

by manhattan at Jan. 6, 2025, 10:49 a.m.

Comments

Submit Cancel

manhattan

5 months, 2 weeks ago

Selected Answer: A

it should be the right one A, network policies for private endpoints This setting only applies to private endpoints in the subnet and affects all private endpoints in the subnet. For other resources in the subnet, access is controlled based on security rules in the network security group. https://learn.microsoft.com/en-us/azure/private-link/disable-private-endpoint-network-policy?tabs=network-policy-portal

upvoted 2 times

...