AZ-500: Microsoft Azure Security Technologies

Question

HOTSPOT -

You have an Azure subscription containing the virtual machines listed in the following table.

Question Image

Subnet1 and Subnet2 are configured with a Microsoft.Storage service endpoint.

You have an Azure Storage account named storageacc1, configured as shown in the following exhibit.

Question Image

For each of the following statements, select Yes if it is true. Otherwise, select No.

Yes or No

Explanation

A storage account restricted to selected networks allows only configured virtual-network subnets or allowed IP sources. A Microsoft.Storage service endpoint changes Storage-bound traffic from the subnet to use the VM's private IP, so VM1's public IP firewall entry does not apply. Because no virtual network subnet is configured on the storage account, traffic from both Subnet1 and Subnet2 is denied.

Learn more

Statements	Yes	No
From VM1, you can upload a blob to storageacc1.
From VM2, you can upload a blob to storageacc1.
From VM3, you can upload a blob to storageacc1.

AZ-500: Microsoft Azure Security Technologies

AstroTutor

Notes

Readiness

QuestionQ16

Community Discussion