You have an on-premises network named Site1.

You have an Azure subscription that contains a storage account named storage1 and a virtual network named VNet1. VNet1 contains a subnet named Subnet1. A private endpoint for storage1 is connected to Subnet1. Site1 is connected to VNet1 by using a Site-to-Site (S2S) VPN.

You need to control access to storage1 from Site1 by using network security groups (NSGs),

What should you do first?

DRAG DROP
-

You have two Azure subscriptions named Sub1 and Sub2 that contain the resources shown in the following table.



VNet1 and VNet2 are NOT connected.

You plan to create an Azure Private Link service named Link1 that will be used to connect VNet1 and VNet2.

You need to ensure that Link1 meets the following requirements:

•Ensures that VM1 can connect only to a web app hosted on VM2
•Prevents VM1 from connecting to the other resources that are connected to VNet2

Which additional resources should you create for each virtual network? To answer, drag the appropriate resources to the correct virtual networks. Each resource may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Correct Answer:

You have an Azure subscription that contains the resources shown in the following table.



You need to ensure that the virtual machines can access storage1, storage2, and DB1 by using service endpoints.

What is the minimum number of service endpoints you should create?

You have an Azure subscription that contains the resources shown in the following table.



Subnet1 is associated with a service endpoint policy named Policy1. Policy1 specifies a single resource that references storage1.

To Subnet1, you deploy an Azure Batch pool named Pool1.

You need to ensure that the compute resources in Pool1 can access storage1.

What should you do?

HOTSPOT
-

You have an Azure subscription that contains the resources shown in the following table.



You need to ensure that network traffic is routed over the Azure backbone network for the following scenarios:

•Traffic from SQLMIT to storage1
•Traffic from domain joined servers on VNet2 to storage

The solution must minimize costs.

What should you configure for each scenario? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Correct Answer: