Subnet1 and Subnet2 are associated to a network security group (NSG) named NSG1 that has the following outbound rule:

HOTSPOT

You have an Azure subscription that contains the virtual machines shown in the following table.

Subnet1 and Subnet2 are associated to a network security group (NSG) named NSG1 that has the following outbound rule:

✑ Priority: 100

✑ Port: Any

✑ Protocol: Any

✑ Source: Any

✑ Destination: Storage

✑ Action: Deny

You create a private endpoint that has the following settings:

✑ Name: Private1

✑ Resource type: Microsoft.Storage/storageAccounts

✑ Resource: storage1

✑ Target sub-resource: blob

✑ Virtual network: Vnet1

✑ Subnet: Subnet1

For each of the following statements, select Yes of the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Show Answer Hide Answer

Suggested Answer:

Explanation:

Yes, Yes, Yes

NSG rules applied to the subnet hosting the private endpoint are not applied to the private endpoint. So the NSG1 doesn't limit storage access from either VM1 or VM2. https://docs.microsoft.com/en-us/azure/storage/common/storage-private-endpoints#network-security-group-rules-for-subnets-with-private-endpoints