A is correct, because with the security rules of NSG you can permit /deny traffic inbound /outbound.
3 more highly voted comments
SilviaS▲ 20Highly votedJuly 30, 2023 10:30 pm
The only reason that I paid for this subscription was your comments. You are really the added value to this page. For sure it will help me pass the exam. Thank you.
I also believe D is correct since it is the best and first prefered option in the given scenario (A is second preferred option)
To prevent traffic from an Azure virtual network from being routed to an Azure Storage account via the internet, you can use the following steps:
1. Create a virtual network service endpoint for Azure Storage: This will allow traffic to Azure Storage to be routed directly from the virtual network to the storage account, without going over the internet.
2. Configure network security group rules: You can configure network security group rules to block traffic from the virtual network to the internet. This will prevent any traffic that is not explicitly allowed from leaving the virtual network.
3. Configure storage account firewall and virtual network settings: You can configure the storage account firewall to only allow traffic from the virtual network, and configure the virtual network settings to only allow traffic to the storage account through the virtual network service endpoint.
gfalconx▲ 8Highly votedNovember 23, 2023 06:04 am
both A and D are correct. Just getting pissed at the wrong answers posted. We paid for the subscription and being presented wrong answers and its up to us to check and verify it.