Exam AZ-700 topic 4 question 10 discussion

The ideal optoin is a Private point , but the question says outbound connection is needed , then adding a rule with a service tag make sense , also if security is not a concern and cost is needed to be minimum. Else a Private point is a perfect solution here

A. a service tag Create a service tag pointing to Azure Cosmos DB to allow the outbound connectivity.

Appeared on the Exam November -2023

B is Honey I cannot believe everyone voted A, i think because everyone is fixated with Service Tags, it would be correct for most Azure services but NOT COSMOS here is why and check the link for yourself from MS **NSG rules are used to limit connectivity to and from a subnet with virtual network. When you add service endpoint for Azure Cosmos DB to the subnet, there's no need to open outbound connectivity in NSG for your Azure Cosmos DB account.** https://learn.microsoft.com/en-us/azure/cosmos-db/how-to-configure-vnet-service-endpoint Also check https://learn.microsoft.com/en-us/azure/cosmos-db/how-to-configure-vnet-service-endpoint

Correct Answer https://learn.microsoft.com/en-us/azure/virtual-network/service-tags-overview#available-service-tags

In exam Feb, 2023

A is correct

on exam today

Appeared on exam Jun/28/22

why not B. a private endpoint?

This question was on the exam on 18th Feb 2022.

Service Tags

on exam 6/2/2022

on exam 1/6/2022

What is service tag in Azure? Image result for azure service tags A service tag represents a group of IP address prefixes from a given Azure service. ... You can use service tags to define network access controls on network security groups or Azure Firewall. Use service tags in place of specific IP addresses when you create security rules.

User defined service tag to enable to connection to Cosmos DB.

You can use service tags to define network access controls on network security groups or Azure Firewall. Use service tags