AZ-700 Exam QuestionsBrowse all questions from this exam

AZ-700 Exam - Question 240


HOTSPOT

-

You have an Azure subscription that contains the resources shown in the following table.

You need to restrict access to storage1 and sql1 by using service endpoints. The solution must meet the following requirements:

• Allow access from Subnet1 to SQLDB1.

• Implement service endpoint policies to restrict access to supported resources.

• Allow access from Subnet1 to storage1 and the read-only replica of storage1 in the paired Azure region.

What is the minimum number of service endpoints and service endpoint policies you should create? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Answer
Correct Answer:

Discussion

5 comments
Sign in to comment
matanzpl
Apr 8, 2024

Service Endpoint: 2 - Storage and SQL SE Policies: 1 - just for Storage SE

LieJ0n
Apr 21, 2024

agreed!

wds
Apr 1, 2024

Correct

Avanade2023
Apr 13, 2024

Service endpoint: 3 (sql1 and storage1 in East US, storage1 in West US) service endpoint policy: 3 (sql1 and storage1 in East US, storage1 in West US)

AlainChk
Jun 29, 2024

We need a second SE Policy to restrict access for SQLDB1. So that makes: 2 SE (Storage and SQL) 2 SE Policies (Storage1 and SQL)

Andrewwfw
Jul 11, 2024

I believe the correct answer should be 3 & 1 Service Endpoint 3 (sql1 and storage1 in East US, storage1 in West US) Service Endpoint Policy 2 (storage in East US, storage in West US) Reasons: Virtual networks must be in the same region as the service endpoint policy. (You need 2 policies in the 2 regions for storage accounts) Azure SQL Server does not support service endpoint policies (Only Azure SQL Managed Instance does)

Andrewwfw
Jul 11, 2024

Correction, 1. Now we have Azure Storage cross-region service endpoints 2. You dont need a second policy for the second region: "RA-GRS secondary access is automatically allowed if the primary account is listed." https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoint-policies-overview Then answer should be 2 & 1