You plan to migrate App1 to Azure. You need to recommend a network connectivity solution for the Azure Storage account that will host the App1 data. The solutio...
Microsoft AZ-305 Exam
Questions Number: 252 out of 268 Questions
94.03%
Question 252
You plan to migrate App1 to Azure. You need to recommend a network connectivity solution for the Azure Storage account that will host the App1 data. The solution must meet the security and compliance requirements. What should you include in the recommendation?
Private Endpoint securely connect to storage accounts from on-premises networks that connect to the VNet using VPN or ExpressRoutes with private-peering. Private Endpoint also secure your storage account by configuring the storage firewall to block all connections on the public endpoint for the storage service. Incorrect Answers: A: Microsoft peering provides access to Azure public services via public endpoints with public IP addresses, which should not be allowed. B: Azure public peering has been deprecated. C: By default, Service Endpoints are enabled on subnets configured in Azure virtual networks. Endpoints can't be used for traffic from your premises to Azure services. Reference: https://docs.microsoft.com/en-us/azure/expressroute/expressroute-circuit-peerings
