Exam DP-201 topic 3 question 23 discussion

Actual exam question from Microsoft's DP-201

Question #: 23
Topic #: 3

You need to implement an Azure Storage account that will use a Blob service endpoint that uses zone-redundant storage (ZRS).
The storage account must only accept connections from a virtual network over Azure Private Link.
What should you include in the implementation?

A. a private endpoint for Azure Blob storage
B. a customer-managed key
C. a shared access signature (SAS)
D. a firewall rule to allow traffic from the virtual network

Show Suggested Answer

Suggested Answer: A 🗳️
You can use private endpoints for your Azure Storage accounts to allow clients on a virtual network (VNet) to securely access data over a Private Link.
When creating the private endpoint, you must specify the storage account and the storage service to which it connects. You need a separate private endpoint for each storage service in a storage account that you need to access, namely Blobs, Data Lake Storage Gen2, Files, Queues, Tables, or Static Websites.
Note: The private endpoint uses an IP address from the VNet address space for your storage account service. Network traffic between the clients on the VNet and the storage account traverses over the VNet and a private link on the Microsoft backbone network, eliminating exposure from the public internet.
Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-private-endpoints

by hirantct at June 21, 2021, 10 a.m.

Comments

Submit Cancel

ZodiaC

3 years, 11 months ago

Correct!

upvoted 1 times

...

hirantct

3 years, 11 months ago

Correct

upvoted 1 times

...