AZ-800 Private Link and Endpoints 2

Question 1

A company wants to access Azure SQL Database from an on-premises network over ExpressRoute without traversing the public internet. Which feature enables this?

Accepted Answer

Private Endpoint with private DNS zone

Answer

A Private Endpoint assigns a private IP to Azure SQL in your VNet, and combined with a private DNS zone, on-premises traffic via ExpressRoute resolves and routes to the private IP.

Question 2

When you create a Private Endpoint for an Azure Storage account, what DNS record is automatically created in the private DNS zone?

Accepted Answer

An A record mapping the storage FQDN to the private IP

Answer

Azure creates an A record in the privatelink DNS zone that maps the storage account FQDN to the private endpoint's private IP address.

Question 3

Which Azure Private Link component allows you to expose your own service hosted behind a Standard Load Balancer to other VNets or tenants?

Accepted Answer

Private Link Service

Answer

Azure Private Link Service lets you expose your own application behind a Standard Internal Load Balancer so consumers can connect via their own Private Endpoints.

Question 4

A Private Endpoint has been deployed but DNS resolution still returns the public IP of the Azure service. What is the most likely cause?

Accepted Answer

The private DNS zone is not linked to the VNet

Answer

Without a virtual network link on the private DNS zone to the consumer VNet, DNS queries resolve via public DNS and return the public IP instead of the private one.

Question 5

You need to allow a Private Link Service consumer to connect automatically without approval. Which approval method should you configure?

Accepted Answer

Automatic approval using subscription allow-listing

Answer

Private Link Service supports auto-approval by listing specific subscription IDs, so connections from those subscriptions are approved without manual intervention.

AZ-800 - Microsoft Azure Networking Solutions Practice Test

AZ-800 - Microsoft Azure Networking Solutions Practice Test

AZ-800 Private Link and Endpoints 2