You have an Azure subscription that contains the virtual machines shown in the following table

HOTSPOT

You have an Azure subscription that contains the virtual machines shown in the following table.

Subnet1 and Subnet2 are associated to a network security group (NSG) named NSG1 that has the following outbound rule:

✑ Priority: 100

✑ Port: Any

✑ Protocol: Any

✑ Source: Any

✑ Destination: Storage

✑ Action: Deny

You create a private endpoint that has the following settings:

✑ Name: Private1

✑ Resource type: Microsoft.Storage/storageAccounts

✑ Resource: storage1

✑ Target sub-resource: blob

✑ Virtual network: Vnet1

✑ Subnet: Subnet1

For each of the following statements, select Yes of the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

View Answer

Answer:

Explanation:

Yes, Yes, Yes

NSG rules applied to the subnet hosting the private endpoint are not applied to the private endpoint. So the NSG1 doesn’t limit storage access from either VM1 or VM2. https://docs.microsoft.com/en-us/azure/storage/common/storage-private-endpoints#network-security-group-rules-for-subnets-with-private-endpoints