You have an Azure subscription Sub1 with VNet1 and Subnet1 containing an Ubuntu Server 18.04 VM (VM1). A service endpoint for Microsoft.Storage is created on Subnet1. Before deploying Docker containers to VM1, what must you do so containers can access Azure Storage via the service endpoint?

For Docker containers to utilize Azure service endpoints, the host VM needs a Container Network Interface (CNI) plugin. Docker's default bridge network doesn't inherently support service endpoints. A CNI plugin, like Azure CNI, integrates container networking with the underlying Azure Virtual Network, allowing containers to acquire IP addresses from the VNet subnet and thus access service endpoints configured on that subnet. Creating an application security group and NSG is for network traffic filtering, not for enabling service endpoint access for containers. Editing docker-compose.yml configures container deployments but doesn't resolve the underlying network integration requirement for service endpoints.