Exam AZ-104 topic 2 question 74 discussion

Per the MS documentation, private endpoint seems to be the proper choice: "You can use private endpoints for your Azure Storage accounts to allow clients on a virtual network (VNet) to securely access data over a Private Link. The private endpoint uses a separate IP address from the VNet address space for each storage account service. Network traffic between the clients on the VNet and the storage account traverses over the VNet and a private link on the Microsoft backbone network, eliminating exposure from the public internet." Link: https://learn.microsoft.com/en-us/azure/storage/common/storage-private-endpoints

I took Exam of Azure- 104 at 27/2/2023 I score 920 points out of 1000 points. This was on it and my answer was: B

Exam december 2024, private endpoints.

Requirement: Ensure all traffic between VM1 (connected to VNet1) and storage1 (a storage account) travels across the Microsoft backbone network. Key Details: VNet1: Enabled forced tunneling. VM1: Connected to VNet1. Storage1: Storage account. Solution Approach: To route traffic between a virtual machine and a storage account over the Microsoft backbone network, you must use Private Endpoints. Private Endpoints provide private connectivity to Azure services such as storage accounts by mapping the service to a private IP address within the virtual network. This ensures traffic does not traverse the public internet.

B is correct

B is correct

To ensure that all the traffic from VM1 to storage1 travels across the Microsoft backbone network without going out to the public internet, you should use a private endpoint. A private endpoint uses a private IP address from your VNet, effectively bringing the service into your VNet. Any traffic between your virtual machine and the storage account will traverse over the VNet and stay on the Microsoft backbone network, without ever leaving it. Thus, the correct answer is: B. private endpoints.

This question was in my exam on 31/08/2023.

"Azure Private Link enables you to access Azure PaaS Services (for example, Azure Storage and SQL Database) and Azure hosted customer-owned/partner services over a private endpoint in your virtual network. Traffic between your virtual network and the service travels the Microsoft backbone network. Exposing your service to the public internet is no longer necessary. " https://learn.microsoft.com/en-us/azure/private-link/private-link-overview?toc=%2Fazure%2Fvirtual-network%2Ftoc.json

Estava no exame hoje

B: Take the VPN / VPN Gateway resources out of the question and the answer would be the same.

VPN is not part of Az-104 exam right ?

A private endpoint is a network interface that uses a private IP address from your virtual network. This network interface connects you privately and securely to a service that's powered by Azure Private Link. By enabling a private endpoint, you're bringing the service into your virtual network. The service could be an Azure service such as: Azure Storage Azure Cosmos DB Azure SQL Database Your own service, using Private Link service. https://learn.microsoft.com/en-us/azure/private-link/private-endpoint-overview

answer is B: Private endpoints are used to provide secure and private connectivity from a virtual network to Azure storage. When you configure a private endpoint, a private IP address is assigned to the storage account within the virtual network. All traffic to the storage account goes over the Microsoft backbone network, rather than over the public internet, providing increased security and reliability. By configuring a private endpoint for the storage account in this scenario, you can ensure that all the traffic from VM1 to storage1 travels across the Microsoft backbone network.

is it new question?

Optimized routing using the Microsoft global network https://azure.microsoft.com/en-us/products/virtual-wan