Note: This question is part of a series that share the same scenario. Each question proposes a distinct solution that might meet the goals. After you answer, you cannot return to this question. You have an Azure subscription that contains: • A virtual network named Vnet1 • A subnet named Subnet1 in Vnet1 • A virtual machine named VM1 connected to Subnet1 • Three storage accounts named storage1, storage2, and storage3 You must allow VM1 to access storage1 but prevent VM1 from accessing any other storage accounts. Solution: Configure the firewall settings on storage1 to only allow connections originating from Vnet1. Does this solution achieve the requirement?
Choose an answer
Tap an option to check your answer.
Correct answer: No.
Why this is the answer
This solution does not achieve the requirement. While configuring the firewall settings on storage1 to only allow connections from Vnet1 would permit VM1 to access storage1, it would not prevent VM1 from accessing storage2 or storage3. To restrict VM1's access to only storage1, you would need to implement a Network Security Group (NSG) on Subnet1. The NSG would have an outbound rule allowing access to storage1's service endpoint or IP address range, and a deny-all outbound rule for other storage accounts or a more specific deny rule for storage2 and storage3.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed