AZ-800 Private Link and Endpoints 4

Question 1

You want to use Azure Private DNS Resolver to forward private endpoint DNS queries from on-premises to Azure. What must you deploy?

Accepted Answer

An inbound endpoint in the VNet linked to the private DNS zone

Answer

The Azure DNS Private Resolver inbound endpoint provides an IP in your VNet that on-premises DNS servers can forward queries to, which then resolve via Azure private DNS zones.

Question 2

A Private Link Service requires NAT IP configuration. What is the purpose of the NAT IP in this context?

Accepted Answer

It translates the consumer's source IP to avoid address overlap with the provider VNet

Answer

The NAT IP performs SNAT on consumer traffic so the provider network sees a private IP from its own address space, avoiding IP conflicts between consumer and provider VNets.

Question 3

Which Azure CLI command correctly creates a Private Endpoint for an Azure SQL server named 'mysqlserver' in resource group 'myRG'?

Accepted Answer

az network private-endpoint create --connection-name myConn --private-connection-resource-id /subscriptions/.../servers/mysqlserver --group-id sqlServer

Answer

The 'az network private-endpoint create' command with --private-connection-resource-id and --group-id is the correct syntax to create a Private Endpoint for an Azure SQL server.

Question 4

After creating a Private Endpoint for Azure Service Bus, which private DNS zone name should be used?

Accepted Answer

privatelink.servicebus.windows.net

Answer

Azure Service Bus uses the private DNS zone 'privatelink.servicebus.windows.net' for Private Endpoint DNS resolution.

Question 5

A multi-tenant SaaS provider wants to expose their service via Private Link without revealing their VNet IP addressing to consumers. Which Private Link feature achieves this?

Accepted Answer

The Private Endpoint NIC uses only the consumer's IP space

Answer

Since the Private Endpoint NIC receives an IP from the consumer's own VNet address space, consumers never see or route to the provider's internal IP addresses.

AZ-800 - Microsoft Azure Networking Solutions Practice Test

AZ-800 - Microsoft Azure Networking Solutions Practice Test

AZ-800 Private Link and Endpoints 4