Exam SC-500 Topic 1 Question 39 Discussion

Actual exam question for Microsoft's SC-500 exam
Question #: 39
Topic #: 1
You have an Azure subscription that contains the resources shown in the following table.

VM1 contains an application that accesses storage1. Another application accesses storage1 from a public IP address of xxx.xxx.xx.xx.
For storage1, you set Public network access to Enabled from selected virtual networks and IP addresses. You add an IP network rule for xxx.xxx.xx.xx.
After the configuration, only connections from xxx.xxx.xx.xx succeed.
You need to ensure that both VM1 and xxx.xxx.xx.xx.can access storage1 over the public endpoint, while preventing all other access.
What should you do?

Suggested Answer: D Vote an answer

To ensure that both the Azure Virtual Machine and the external public IP address can access the storage account over its public endpoint while blocking all other traffic, you must enable a Virtual Network Service Endpoint (Microsoft.Storage) on the VM's subnet and add a Virtual Network Rule for that subnet to the storage account's firewall Reference:
https://towardsdatascience.com/demystifying-azure-storage-account-network-access-9e024d2f02c6/

by Jennifer at Aug 08, 2026, 03:31 AM

Limited Time Offer

15%

Off

Get Premium SC-500 Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10