HOTSPOT - You have an Azure subscription that contains the virtual machines shown in the following table. 

Subnet1 and Subnet2 have a Microsoft.Storage service endpoint configured. You have an Azure Storage account named storageacc1 that is configured as shown in the following exhibit. 

For each of the following statements, select Yes if the statement is true. Otherwise, select No. Hot Area: 

Box 1: Yes - The public IP of VM1 is allowed through the firewall. Box 2: No - The allowed virtual network list is empty so VM2 cannot access storageacc1 directly.The public IP address of VM2 is not in the allowed IP list so VM2 cannot access storageacc1 over the Internet. Box 3: No - The allowed virtual network list is empty so VM3 cannot access storageacc1 directly.VM3 does not have a public IP address so it cannot access storageacc1 over the Internet. Reference: https://docs.microsoft.com/en-gb/azure/storage/common/storage-network-security