Exam AZ-303 topic 5 question 92 discussion

Actual exam question from Microsoft's AZ-303

Question #: 92
Topic #: 5

You have a resource group named RG1 that contains the following:
A virtual network that contains two subnets named Subnet1 and Subnet2
An Azure Storage account named contososa1
An Azure firewall deployed to Subnet2
You need to ensure that contososa1 is accessible from Subnet1 over the Azure backbone network.
What should you do?

A. Deploy an Azure firewall to Subnet1.
B. Remove the Azure firewall.
C. Implement a virtual network service endpoint.
D. Create a stored access policy for contososa1.

Show Suggested Answer

Suggested Answer: C 🗳️
Virtual Network (VNet) service endpoint provides secure and direct connectivity to Azure services over an optimized route over the Azure backbone network.
Virtual Network (VNet) service endpoints extend your virtual network private address space and the identity of your VNet to the Azure services, over a direct connection. Endpoints allow you to secure your critical Azure service resources to only your virtual networks. Traffic from your VNet to the Azure service always remains on the Microsoft Azure backbone network.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview

by Stephan99 at Jan. 11, 2021, 6:33 p.m.

Comments

Submit Cancel

Stephan99

Highly Voted 4 years, 4 months ago

correct, see also https://docs.microsoft.com/en-us/learn/modules/secure-and-isolate-with-nsg-and-service-endpoints/4-vnet-service-endpoints

upvoted 11 times

...

nfett

Highly Voted 3 years, 11 months ago

repeat

upvoted 6 times

...

edmacoar123

Most Recent 3 years, 6 months ago

On exam today 19/11/21. Correct answer. Score 860.

upvoted 1 times

...

VMUN

3 years, 11 months ago

26-June-21, Passed the exam. Correct Answer

upvoted 2 times

...

SnakePlissken

4 years ago

Correct. Duplicate question: topic 1 question 54. https://www.examtopics.com/exams/microsoft/az-303/view/11/

upvoted 4 times

...

YellowSky002

4 years, 3 months ago

The question says: "You need to ensure that contososa1 is accessible from Subnet1 over the Azure backbone network.". The difference between Private link and Service endpoint is that the former connects the service provider and consumer using a backbone network. This is not the case with service end point which still uses the public internet but luck down access.

upvoted 2 times

[Removed]

4 years, 3 months ago

Virtual network service endpoints Use virtual network service endpoints to extend your private address space in Azure by providing a direct connection to your Azure services. Service endpoints let you secure your Azure resources to only your virtual network.+++ Service traffic will remain on the Azure backbone, and doesn't go out to the internet.+++ https://docs.microsoft.com/en-us/learn/modules/secure-and-isolate-with-nsg-and-service-endpoints/4-vnet-service-endpoints

upvoted 4 times

...