Microsoft Azure Architect Technologies (2020, legacy) — Question 16

You have a resource group named RG1 that contains the following:
✑ A virtual network that contains two subnets named Subnet1 and AzureFirewallSubnet
✑ An Azure Storage account named contososa1
✑ An Azure firewall deployed to AzureFirewallSubnet
You need to ensure that contososa1 is accessible from Subnet1 over the Azure backbone network.
What should you do?

Answer options

• A. Modify the Firewalls and virtual networks settings for contososa1.
• B. Create a stored access policy for contososa1.
• C. Implement a virtual network service endpoint.
• D. Remove the Azure firewall.

Correct answer: C

Explanation

The correct answer is C because implementing a virtual network service endpoint allows the storage account to be accessed securely from the specified subnet over the Azure backbone. Option A is incorrect as it does not specifically enable access from the subnet; B is irrelevant because stored access policies do not facilitate network access, and D would remove the firewall, potentially exposing resources to security risks.