AZ-700 AZ-700 Private Link and Service Endpoints

Question 1

What is the primary purpose of Azure Private Link?

Accepted Answer

To access Azure PaaS services over a private IP address within your VNet

Answer

Azure Private Link enables you to access Azure PaaS services (like Azure Storage and SQL) through a private endpoint using a private IP in your virtual network.

Question 2

At which level are Azure service endpoints enabled?

Accepted Answer

Subnet level

Answer

Service endpoints are enabled at the subnet level, extending the VNet's identity to Azure services over the Azure backbone network.

Question 3

What type of IP address does a private endpoint use?

Accepted Answer

A private IP address from the VNet address space

Answer

A private endpoint is assigned a private IP address from the address space of the virtual network where it is deployed.

Question 4

Which Azure resource is automatically created when you configure a private endpoint?

Accepted Answer

A network interface with a private IP

Answer

Configuring a private endpoint automatically creates a network interface (NIC) with a private IP address in the designated subnet.

Question 5

Why are private DNS zones important when using private endpoints?

Accepted Answer

To resolve the service's public FQDN to its private IP address

Answer

Private DNS zones are used so that the service's FQDN (e.g., mystorageaccount.blob.core.windows.net) resolves to the private endpoint's private IP instead of the public IP.

(AZ-700) Azure Network Engineer Associate Practice Test

(AZ-700) Azure Network Engineer Associate Practice Test

AZ-700 AZ-700 Private Link and Service Endpoints