Exam AZ-303 topic 5 question 25 discussion

the subnet enabled on firewall portal is12.2.0.0/24. So, in the first box, the answer is "Never"

The CORRECT selection is NEVER, NEVER and here is why. since 10.2.9.0/24 part of 10.2.0.0/16 is not checked and 10.2.0.0/24 is allowed to access this storage account where 10.2.9.0/24 is not in 10.2.0.0/24 ! ,The endpoint is enable though, it is enable to 10.2.0.0/24, but not to 10.2.9.0/24. So, the endpoint is not enable to 10.2.9.0/24. A subnet mask of 24 bits basically means that the first 3 numbers of the IP are FIXED! Thus, the 10.2.0 will never change and the remaining number gives 256 subnet addresses. Then, an IP starting by 10.2.9 does not belong to the subnet that is allowed. For fun try it on the portal, when configuring this option it forces you to select subnets, which means that, in order to provide access, they should be explicitly shown on the configuration screen.

answer is NEVER , NEVER

On exam today 19/11/21. NEVER/NEVER. Score 860.

On exam 6/7/21

The answers are Never/Never Same as Question#43 in Topic 1

Duplicate question. Topic 1, Question 45. https://www.examtopics.com/exams/microsoft/az-303/view/9/

this question was in the exam today, the exhibit on the exam did not have an ip address on the VNET (address range).

1: Never because Service Endpoint is provided per Subnet. Only listed 10.2.0.0/24, not 10.2.9.0/24.

never never should be correct here.

This is one of those questions just to confuse people for no purpose. I would say the answer is still ALWAY, NEVER. The text of question says the subnet is 12.2.9/0/24, I would say the screenshot is a mistake. Of coz anyone can argue otherwise.

Never, Never

Answer should be never, never; The subnet 10.2.9.0 must be added (enabled) to the endpoint via "add existing vnet".

What is the correct answer? Service Endpoints is specific to a virtual network. So ideally all subnets should access the resource

tested and it seems that we cannot add a fw rule for a subnet that does not have service endpoint enabled.

Answer should be Never, Never. The first subnet 10.2.0.0/16 endpoint status isn't enabled.