AZ-500: Microsoft Azure Security Technologies

By Microsoft · Question Mode

QuestionQ40

Secure networking

You have an Azure subscription connected to an on-premises datacenter that contains the resources in the following table.

Question Image

You must configure virtual network service endpoints for VNet1 and VNet2. The solution must meet these requirements:

  • Virtual machines connected to the VNet1 subnet must access storage1, storage2, and Azure AD through the Microsoft backbone network.
  • Virtual machines connected to the VNet2 subnet must access storage1 and KeyVault1 through the Microsoft backbone network.
  • The virtual machines must use the Microsoft backbone network to communicate between VNet1 and VNet2.

How many service endpoints should be configured for each virtual network?

Select
VNet1:
VNet2:
Explanation

A single Azure Storage service endpoint covers access from its enabled subnet to multiple storage accounts, so storage1 and storage2 do not require separate endpoints. Azure Key Vault uses the separate Microsoft.KeyVault service endpoint. The Microsoft.AzureActiveDirectory endpoint is a distinct endpoint type (used for Azure Data Lake Storage Gen1 integration). Service endpoints secure traffic from a subnet to Azure PaaS services; they do not provide VNet-to-VNet connectivity, which requires VNet peering or gateway connectivity.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!