Cloud · Microsoft Azure · Certifications
AZ-500: Docker access through a Storage service endpoint
Select one answer. Your result and the explanation will appear immediately.
Question 13
You are deploying Docker containers on an Azure VM running Ubuntu in a subnet with a Microsoft.Storage service endpoint. The containers cannot access Azure Storage via the service endpoint. What should you do on the VM to enable this?
Correct answer: Change the docker-compose file to use host networking mode.
Docker bridge networking uses NAT, so traffic from containers may not use the VM network identity in the way required for the service endpoint path. Host networking makes the containers use the VM’s network stack, allowing their Storage traffic to use the subnet’s Microsoft.Storage service endpoint.
Exam clue: The service endpoint is already enabled on the VM subnet. The missing link is the container network mode, not public exposure or another access-control layer.
Remember: For Docker workloads on a VM that must use a VNet service endpoint, host networking can make the container traffic use the VM’s VNet networking context.