Home » Microsoft » AZ-305 » What should you include in the recommendation?
You plan to migrate App1 to Azure.
You need to recommend a network connectivity solution for the Azure Storage account that will host the App1 data. The solution must meet the security and compliance requirements.
What should you include in the recommendation?
A. Microsoft peering for an ExpressRoute circuit
B. Azure public peering for an ExpressRoute circuit
C. a service endpoint that has a service endpoint policy
D. a private endpoint
Correct Answer: D
Explanation/Reference:
Explanation:
Private Endpoint securely connect to storage accounts from on-premises networks that connect to the VNet using VPN or ExpressRoutes with private-peering.
Private Endpoint also secure your storage account by configuring the storage firewall to block all connections on the public endpoint for the storage service.
Incorrect Answers:
A: Microsoft peering provides access to Azure public services via public endpoints with public IP addresses, which should not be allowed.
B: Azure public peering has been deprecated.
C: By default, Service Endpoints are enabled on subnets configured in Azure virtual networks. Endpoints can’t be used for traffic from your premises to Azure services.
Reference: https://docs.microsoft.com/en-us/azure/expressroute/expressroute-circuit-peerings
How To Pass Azure AZ-305 Exam?
Microsoft Azure AZ-305 PDF dumps.
High quality AZ-305 PDF and software. VALID exam to help you pass.
|
|
How To Pass AZ-305 Exam?
Microsoft AZ-305 PDF dumps.
High quality AZ-305 pdf and software. VALID exam to help you pass.
|
|