A Storage account must be privately reachable and must reject public access. Which two configuration areas are required? Select 2 answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

A.Assume private endpoint creation always disables every public endpoint
B.Create and approve appropriate private endpoint connections with working private DNS
C.Configure public network access and service firewall policy separately
D.Enable a service endpoint and assume it assigns a private IP to the resource
E.Replace all application permissions with the endpoint IP address

Show the answer and explanation

✓ Correct answers

Create and approve appropriate private endpoint connections with working private DNS
Configure public network access and service firewall policy separately

Private endpoints and DNS establish the private path; public exposure requires separate service settings. Private Link alone does not universally disable public access, network addresses do not authorize data access, and service endpoints retain public service addressing. Source guide: PDF page(s) 57-58.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.