add screenshots

Author: msakande

articles/machine-learning/how-to-prevent-data-loss-exfiltration.md

@@ -63,6 +63,9 @@ Use the form at [https://forms.office.com/r/1TraBek7LV](https://forms.office.com
         * __Resource__: The default storage account of your workspace.
 
         Select __Add__ to add the resource information.
+
+        :::image type="content" source="media/how-to-data-exfiltration-prevention/create-service-endpoint-policy.png" alt-text="A screenshot showing how to create a service endpoint policy.":::
+
     1. Select __+ Add an alias__, and then select `/services/Azure/MachineLearning` as the __Server Alias__ value. Select __Add__ to add the alias.
 
         > [!NOTE]
@@ -118,6 +121,7 @@ For more information, see [How to secure training environments](how-to-secure-tr
 1. In the form that appears, expand the __Services__ dropdown and then __enable Microsoft.Storage__. Select __Save__ to save these changes.
 1. Apply the service endpoint policy to your workspace subnet.
 
+:::image type="content" source="media/how-to-data-exfiltration-prevention/enable-storage-endpoint-for-subnet.png" alt-text="A screenshot of the Azure portal showing how to enable storage endpoint for the subnet.":::
 ## 5. Curated environments
 
 When using Azure ML curated environments, make sure to use the latest environment version. The container registry for the environment must also be `mcr.microsoft.com`. To check the container registry, use the following steps: