Exam AZ-700 topic 4 question 13 discussion

Actual exam question from Microsoft's AZ-700

Question #: 13
Topic #: 4

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains the following resources:
✑ A virtual network named Vnet1
✑ A subnet named Subnet1 in Vnet1
✑ A virtual machine named VM1 that connects to Subnet1
✑ Three storage accounts named storage1, storage2, and storage3
You need to ensure that VM1 can access storage1. VM1 must be prevented from accessing any other storage accounts.
Solution: You configure the firewall on storage1 to only accept connections from Vnet1.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️

by unclegrandfather at June 28, 2022, 11:01 p.m.

Comments

Submit Cancel

Jamesat

Highly Voted 1 year, 11 months ago

Selected Answer: B

Correct. Setting a firewall setting to only allow access to Storage1 from VM 1 wouldn't stop access to the other 2 storage accounts. As per requirements, VM1 should only be able to access Storage1. NOT Storage1 should only be accessed from VM1.

upvoted 7 times

...

voldemort123

Most Recent 10 months, 1 week ago

Service endpoint need to be enabled for storage, only then you can permit/deny in paas firewall.

upvoted 2 times

...

daemon101

1 year ago

I think even though you allowed the vnet to SA1 firewall, VM1 won't still be able to access SA1 as it is not mentioned that the service endpoint for storage on subnet1 is enabled.

upvoted 1 times

...