Question

Your company runs an application in an Azure VNet that must access a general-purpose v2 storage account privately over the Microsoft backbone. The application uses only blob storage. You are creating a private endpoint for the storage account and want to minimize the number of private IP addresses consumed while ensuring only blob access is provisioned. When creating the private endpoint, what must you configure to achieve this?

Accepted Answer

Select the 'blob' target sub-resource when creating the private endpoint

Answer

Create the private endpoint with all available sub-resources and rely on NSG rules to block file, queue, and table

Answer

Enable a service endpoint for Microsoft.Storage on the subnet instead of a private endpoint

Answer

Select the 'dfs' target sub-resource to enable the hierarchical blob namespace