Microsoft Certified Azure Fundamentals · Free Practice Question Medium
Question 67
You need to allow Azure resources to communicate securely with an Azure Storage account over a private network. What should you configure?
Select only one answer.
-
A
Azure Private Link
-
B
Service Endpoints
-
C
Azure Virtual Network Peering
-
D
Network Security Group (NSG)
Reveal correct answer
Correct answer: A
A.
Azure Private Link provides a secure and private connection between Azure resources and Azure services, such as Azure Storage, by mapping them to a private IP address within a virtual network. This ensures traffic stays within the Azure network, avoiding public internet exposure.
B.
While Service Endpoints allow secure access to Azure services from a virtual network, they do not map the service to a private IP address, which may be required for stricter security.
C.
Peering connects two virtual networks but does not enable secure connectivity to specific services like Azure Storage.
D.
NSGs are used for controlling traffic flow within or between Azure resources but do not provide a mechanism for securely connecting to Azure services like Azure Storage.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
