Microsoft · AZ-700
Service endpoints
AZ-700 · Lesson 17 of 20 · 2:19:09
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the AZ-700 exam (Microsoft Certified: Azure Network Engineer Associate). In this lesson: when to choose service endpoints over private endpoints, enabling them per subnet and per service, regional limits, virtual network rules on storage accounts and SQL servers, IP rules for on-premises clients, and service endpoint policies that limit a subnet to the storage accounts you list. Includes three original practice questions.
Preview the topics
- Machines in a subnet must reach a storage account that accepts only that subnet, with no DNS change and no extra charge. What fits?
- Warehouse servers on-premises must reach a storage account that is locked to Contoso’s Azure subnets with virtual network rules. What should the team add?
- Machines in the analytics subnet must reach Contoso’s own storage accounts only, and never a storage account outside the company. What should the team configure?