AZ-700 Private Endpoints and Private Link 2

Question 1

What DNS change is required to ensure Azure resources resolve a Private Endpoint's private IP instead of the service's public IP?

Accepted Answer

Create a Private DNS Zone for the service and link it to the VNet

Answer

Creating a Private DNS Zone (e.g., privatelink.blob.core.windows.net) and linking it to the VNet overrides public DNS resolution with the private endpoint's IP.

Question 2

How does a Private Endpoint affect network security for an Azure PaaS service?

Accepted Answer

It allows the service to be accessed from the private IP and can be used alongside firewall rules to disable public access

Answer

Private Endpoints provide a private IP path and can be combined with disabling public network access on the service to ensure all traffic is private.

Question 3

Which feature allows you to use a single Private Endpoint to access multiple services behind the same Private Link Service?

Accepted Answer

Sub-resources (group IDs) allow targeting specific service sub-components

Answer

Some services expose multiple sub-resources (group IDs); you create separate Private Endpoints for each sub-resource (e.g., blob vs. file for Storage Account).

Question 4

What happens to a Private Endpoint if the linked Azure resource (e.g., storage account) is deleted?

Accepted Answer

The Private Endpoint remains and shows a 'disconnected' state

Answer

When the underlying resource is deleted, the associated Private Endpoint enters a 'disconnected' state and must be manually deleted.

Question 5

Which Azure tool can you use to audit all Private Endpoint connections and their approval status across your subscription?

Accepted Answer

The Private Link Center in the Azure portal

Answer

The Azure Private Link Center provides a centralized view of all Private Endpoints and Private Link Services, including connection approval status.

AZ-700 - Designing and Implementing Microsoft Azure Networking Solutions Certification Practice Test

AZ-700 - Designing and Implementing Microsoft Azure Networking Solutions Certification Practice Test

AZ-700 Private Endpoints and Private Link 2