AZ-700 Private Link and Service Endpoints Flashcards
6 cards from real AZ-700 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 AZ-700 Private Link and Service Endpoints flashcards as text
What is the primary purpose of Azure Private Link?
Answer: To access Azure PaaS services over a private IP address within your VNet
Azure Private Link enables you to access Azure PaaS services (like Azure Storage and SQL) through a private endpoint using a private IP in your virtual network.
At which level are Azure service endpoints enabled?
Answer: Subnet level
Service endpoints are enabled at the subnet level, extending the VNet's identity to Azure services over the Azure backbone network.
What type of IP address does a private endpoint use?
Answer: A private IP address from the VNet address space
A private endpoint is assigned a private IP address from the address space of the virtual network where it is deployed.
Which Azure resource is automatically created when you configure a private endpoint?
Answer: A network interface with a private IP
Configuring a private endpoint automatically creates a network interface (NIC) with a private IP address in the designated subnet.
Why are private DNS zones important when using private endpoints?
Answer: To resolve the service's public FQDN to its private IP address
Private DNS zones are used so that the service's FQDN (e.g., mystorageaccount.blob.core.windows.net) resolves to the private endpoint's private IP instead of the public IP.
What are the two connection approval workflow options for a private endpoint?
Answer: Automatic and Manual
Private endpoint connections support Automatic approval (for resources in the same tenant/subscription you control) and Manual approval (requiring explicit acceptance by the resource owner).