HOTSPOT
-

You have an Azure subscription that contains the resources shown in the following table.



You need to restrict access to storage1 and sql1 by using service endpoints. The solution must meet the following requirements:

•Allow access from Subnet1 to SQLDB1.
•Implement service endpoint policies to restrict access to supported resources.
•Allow access from Subnet1 to storage1 and the read-only replica of storage1 in the paired Azure region.

What is the minimum number of service endpoints and service endpoint policies you should create? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Correct Answer:

You have an Azure subscription that contains the following resources:

•A virtual network named Vnet1
•Two subnets named subnet1 and AzureFirewallSubnet
•A public Azure Firewall named FW1
•A route table named RT1 that is associated to Subnet1
•A rule routing of 0.0.0.0/0 to FW1 in RT1

After deploying 10 servers that run Windows Server to Subnet1, you discover that none of the virtual machines were activated.

You need to ensure that the virtual machines can be activated.

What should you do?

HOTSPOT
-

You have an Azure subscription that is linked to a Microsoft Entra tenant. The subscription contains a virtual network named VNet1, a storage account named storage1, an Azure App Service app named App1, and an Azure SQL database named DB1. VNet1 contains two subnets named Subnet1 and Subnet2. Subnet1 and Subnet2 each has a subnet mask of 255.255.255.224.

You plan to perform the following actions:

•On Subnet1, configure a service endpoint to connect to storage1 and a service endpoint to connect to the Microsoft Entra tenant.
•On Subnet2, configure a private endpoint to connect to App1 and a private endpoint to connect to DB1.

How many IP addresses will be available on each subnet once the planned actions are complete? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Correct Answer:

You have two Azure subscriptions named Sub1 and Sub2. Sub1 contains a virtual machine named VM1.

You plan to make VM1 available to the resources in Sub2 by using Azure Private Link.

You need to ensure that the private link service can be configured to provide access to VM1.

What should you configure in Sub1 first?

You have an Azure subscription that contains the resources shown in the following table.



VNet1 contains a subnet named Subnet.

You need to ensure that the resources connected to Subnet1 can access only storage1 and storage3. The solution must minimize administrative effort.

What should you configure?