You have a resource group named RG1 that contains the following:
✑ A virtual network that contains two subnets named Subnet1 and Subnet2
✑ An Azure Storage account named contososa1
✑ An Azure firewall deployed to Subnet2
You need to ensure that contososa1 is accessible from Subnet1 over the Azure backbone network.
What should you do?

A. Deploy an Azure firewall to Subnet1.

B. Remove the Azure firewall.

C. Implement a virtual network service endpoint.

D. Create a stored access policy for contososa1.








 

Suggested Answer: C

Virtual Network (VNet) service endpoints extend your virtual network private address space and the identity of your VNet to the Azure services, over a direct connection. Endpoints allow you to secure your critical Azure service resources to only your virtual networks. Traffic from your VNet to the Azure service always remains on the Microsoft Azure backbone network.
References:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview

This question is in AZ-300 Microsoft Azure Architect Technologies Exam
For getting Microsoft Certified: Azure Solutions Architect Expert Certificate




Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Microsoft. 
The website does not contain actual questions and answers from Microsoft's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to Microsoft.