Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location PL
Mob_nav_barsMENU

Microsoft Exam AZ-700 Topic 7 Question 60 Discussion

Actual exam question for Microsoft's AZ-700 exam
Question #: 60
Topic #: 7
[All AZ-700 Questions]

You have an Azure subscription that contains the resources shown in the following table.

You need to ensure that VM1 and VM2 can connect only to storage1. The solution must meet the following requirements:

* Prevent VM1 and VM2 from accessing any other storage accounts.

* Ensure that storage1 is accessible from the internet.

What should you use?

Show Suggested Answer Hide Answer
Suggested Answer: A

Here are the steps and explanations for ensuring that requests for wwwjelecloud.com from any of your Azure virtual networks resolve to frontdoor1.azurefd.net:

To use a custom domain with your Azure Front Door, you need to create a CNAME record with your domain provider that points to the Front Door default frontend host. A CNAME record is a type of DNS record that maps a source domain name to a destination domain name1.

To create a CNAME record, you need to sign in to your domain registrar's website and go to the page for managing DNS settings1.

Create a CNAME record with the following information1:

Source domain name: wwwjelecloud.com

Destination domain name: frontdoor1.azurefd.net

Save your changes and wait for the DNS propagation to take effect1.

To verify the custom domain, you need to go to the Azure portal and select your Front Door profile. Then select Domains under Settings and select Add2.

On the Add a domain page, select Non-Azure validated domain as the Domain type and enter wwwjelecloud.com as the Domain name. Then select Add2.

On the Domains page, select wwwjelecloud.com and select Verify. This will check if the CNAME record is correctly configured2.

Once the domain is verified, you can associate it with your Front Door endpoint. On the Domains page, select wwwjelecloud.com and select Associate endpoint. Then select your Front Door endpoint from the drop-down list and select Associate2.


by Lettie at May 19, 2024, 10:37 PM

Limited Time Offer

25%

Off

Get Premium AZ-700 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Skye
1 months ago
Guess I'll have to 'link' up my knowledge to answer this one correctly. No 'endpoint' in sight, but I'm sure I can 'service' the question well enough.
upvoted 0 times
...
Fletcher
1 months ago
C is the way to go! A private link is like a VIP pass to storage1, no more crashing the party at other storage accounts.
upvoted 0 times
Melvin
3 days ago
C) a private link
upvoted 0 times
...
Salena
5 days ago
B) a private endpoint
upvoted 0 times
...
Julianna
6 days ago
A) a network security group (NSG)
upvoted 0 times
...
...
Peggy
2 months ago
Hmm, I'm leaning towards D. A service endpoint policy could be a good way to restrict VM1 and VM2 to only accessing storage1.
upvoted 0 times
Regenia
8 days ago
But wouldn't D) a service endpoint policy be more specific in restricting access to only storage1 for VM1 and VM2?
upvoted 0 times
...
Keneth
17 days ago
I agree with you, A network security group (NSG) can help in controlling the traffic to and from the virtual machines.
upvoted 0 times
...
Lyda
28 days ago
I think A) a network security group (NSG) would be a better option to restrict access to storage1 for VM1 and VM2.
upvoted 0 times
...
...
Gilbert
2 months ago
I'm not sure about this one. Could it be B? A private endpoint might work too, right?
upvoted 0 times
Socorro
16 days ago
C) a private link
upvoted 0 times
...
Precious
18 days ago
B) a private endpoint
upvoted 0 times
...
Ressie
1 months ago
A) a network security group (NSG)
upvoted 0 times
...
...
Geoffrey
2 months ago
I think the answer is C. A private link would allow VM1 and VM2 to connect to storage1 without accessing any other storage accounts, and it would also ensure that storage1 is accessible from the internet.
upvoted 0 times
Catalina
19 days ago
Got it, so C) a private link is the most suitable choice to meet all the requirements mentioned.
upvoted 0 times
...
Monte
1 months ago
That's true, but a private link specifically focuses on connecting to a specific resource like storage1 while also allowing internet access.
upvoted 0 times
...
Brinda
2 months ago
But wouldn't A) a network security group (NSG) also help in restricting access to only storage1 for VM1 and VM2?
upvoted 0 times
...
Aileen
2 months ago
I agree with you, C) a private link seems like the best option for this scenario.
upvoted 0 times
...
...
Doyle
2 months ago
But wouldn't a private endpoint be a better option to ensure secure communication?
upvoted 0 times
...
King
3 months ago
I agree, NSG can help us control the traffic to the storage accounts.
upvoted 0 times
...
Rochell
3 months ago
I think we should use a network security group (NSG) to restrict access.
upvoted 0 times
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77