AZ-700 Private Endpoints and Private Link

Question 1

What is an Azure Private Endpoint?

Accepted Answer

A network interface with a private IP that connects to an Azure service via Private Link

Answer

A Private Endpoint is a NIC with a private IP from your VNet subnet, connected to an Azure service through the Private Link service.

Question 2

Which Azure service lets you expose your own application (running behind an Azure Standard Load Balancer) to other VNets using Private Link?

Accepted Answer

Azure Private Link Service

Answer

Azure Private Link Service allows you to publish your own application behind a Standard Load Balancer so consumers can connect via private endpoints in their VNets.

Question 3

When a Private Endpoint is created, what network policy must be disabled on the subnet to allow the private IP assignment?

Accepted Answer

Private endpoint network policies (PrivateEndpointNetworkPolicies)

Answer

The subnet property 'PrivateEndpointNetworkPolicies' must be set to Disabled to allow private endpoints to be deployed in that subnet.

Question 4

What connection approval model allows a Private Link consumer to connect without requiring explicit approval from the provider?

Accepted Answer

Auto-approval

Answer

Auto-approval is configured by the Private Link Service provider to automatically approve connection requests from specific subscriptions.

Question 5

Which statement is TRUE about network traffic flowing through a Private Endpoint?

Accepted Answer

Traffic stays entirely within the Microsoft backbone and never crosses the public internet

Answer

Private Endpoint traffic remains on the Microsoft global network, never crossing the public internet, providing a private and secure path to Azure services.

AZ-700 - Designing and Implementing Microsoft Azure Networking Solutions Certification Practice Test

AZ-700 - Designing and Implementing Microsoft Azure Networking Solutions Certification Practice Test

AZ-700 Private Endpoints and Private Link