Microsoft Azure Architect Technologies (2020, legacy) — Question 78

You have a resource group named RG1 that contains the following:
A virtual network that contains two subnets named Subnet1 and Subnet2
An Azure Storage account named contososa1
An Azure firewall deployed to Subnet2
You need to ensure that contososa1 is accessible from Subnet1 over the Azure backbone network.
What should you do?

Answer options

• A. Deploy an Azure firewall to Subnet1.
• B. Remove the Azure firewall.
• C. Implement a virtual network service endpoint.
• D. Create a stored access policy for contososa1.

Correct answer: C

Explanation

The correct answer is C, as implementing a virtual network service endpoint allows secure access to Azure services like storage accounts directly over the Azure backbone network. Option A is incorrect because adding another firewall would complicate access rather than facilitate it. Option B is not a solution, as removing the firewall would not ensure secure access. Option D does not help with network access and is focused on permissions rather than connectivity.