Microsoft · hands-on lab
AZ-104 extra practice 10: Service endpoints and storage firewall
Lock a storage account to one subnet with a service endpoint and the storage firewall.
- 45 minutesTime in the lab
- IntermediateLevel
- 5 tasksChecked automatically
- CertificateVerifiable link when you finish
The situation
The security team says the application storage account must not be reachable from the internet, only from the app subnet.
What you will do
- App network
- Service endpoint
- Storage account
- Only the app subnet
- Endpoint or private endpoint?question
How it works
The lab opens in your browser: a real cloud console or terminal, nothing to install. Work through the tasks, press Check after each one and the portal verifies your work. Stuck? Ask for a hint. Finish every task and you get a certificate page with its own verification link for LinkedIn or your CV.