AZ-303 Exam QuestionsBrowse all questions from this exam

AZ-303 Exam - Question 247


You have a resource group named RG1 that contains the following:

A virtual network that contains two subnets named Subnet1 and Subnet2

An Azure Storage account named contososa1

An Azure firewall deployed to Subnet2

You need to ensure that contososa1 is accessible from Subnet1 over the Azure backbone network.

What should you do?

Show Answer
Correct Answer: C

To ensure that the Azure Storage account (contososa1) is accessible from Subnet1 over the Azure backbone network, you should implement a virtual network service endpoint. Virtual network service endpoints provide secure and direct connectivity to Azure services over the Azure backbone network, allowing traffic from the virtual network to the Azure service to remain on the Azure backbone network and not use the public internet. This approach extends the private address space of the virtual network to the Azure service, ensuring a secure and optimized connection.

Discussion

6 comments
Sign in to comment
Stephan99
Jan 11, 2021

correct, see also https://docs.microsoft.com/en-us/learn/modules/secure-and-isolate-with-nsg-and-service-endpoints/4-vnet-service-endpoints

nfett
Jun 22, 2021

repeat

SnakePlissken
May 29, 2021

Correct. Duplicate question: topic 1 question 54. https://www.examtopics.com/exams/microsoft/az-303/view/11/

YellowSky002
Feb 22, 2021

The question says: "You need to ensure that contososa1 is accessible from Subnet1 over the Azure backbone network.". The difference between Private link and Service endpoint is that the former connects the service provider and consumer using a backbone network. This is not the case with service end point which still uses the public internet but luck down access.

[Removed]
Mar 4, 2021

Virtual network service endpoints Use virtual network service endpoints to extend your private address space in Azure by providing a direct connection to your Azure services. Service endpoints let you secure your Azure resources to only your virtual network.+++ Service traffic will remain on the Azure backbone, and doesn't go out to the internet.+++ https://docs.microsoft.com/en-us/learn/modules/secure-and-isolate-with-nsg-and-service-endpoints/4-vnet-service-endpoints

VMUN
Jun 26, 2021

26-June-21, Passed the exam. Correct Answer

edmacoar123
Nov 19, 2021

On exam today 19/11/21. Correct answer. Score 860.