Exam AZ-305 topic 8 question 3 discussion

Actual exam question from Microsoft's AZ-305

Question #: 3
Topic #: 8

You plan to migrate App1 to Azure.
You need to recommend a network connectivity solution for the Azure Storage account that will host the App1 data. The solution must meet the security and compliance requirements.
What should you include in the recommendation?

A. Microsoft peering for an ExpressRoute circuit
B. Azure public peering for an ExpressRoute circuit
C. a service endpoint that has a service endpoint policy
D. a private endpoint

Show Suggested Answer

Suggested Answer: D 🗳️

by WickedMJ at Oct. 10, 2022, 7:02 a.m.

Comments

Submit Cancel

WickedMJ

Highly Voted 2 years, 1 month ago

Selected Answer: D

D. a private endpoint

upvoted 16 times

...

zellck

Highly Voted 1 year, 9 months ago

Selected Answer: D

D is the answer. https://learn.microsoft.com/en-us/azure/storage/common/storage-private-endpoints You can use private endpoints for your Azure Storage accounts to allow clients on a virtual network (VNet) to securely access data over a Private Link. The private endpoint uses a separate IP address from the VNet address space for each storage account service. Network traffic between the clients on the VNet and the storage account traverses over the VNet and a private link on the Microsoft backbone network, eliminating exposure from the public internet.

upvoted 5 times

...

SeMo0o0o0o

Most Recent 2 weeks, 6 days ago

Selected Answer: D

D is correct

upvoted 1 times

...

SindhuM

1 year, 2 months ago

Can this be achieved with the private endpoint.? On-premises users and services must be able to access the Azure Storage account that will host the data in App1.

upvoted 1 times