A company runs a custom application on Azure VMs behind an internal load balancer. They want to expose this application to a specific partner organization that has its own Azure subscription. The partner will create a private endpoint to connect. The company wants to ensure that only the partner's subscription can create private endpoints to this service. What should they configure on the Private Link Service?

Set auto-approval to the partner's subscription ID.

Set the load balancer's frontend IP to a public IP.

Set visibility to the partner's subscription ID.

Configure a network security group to allow only the partner's IP range.

A company plans to deploy private endpoints for multiple Azure services in the same VNet. What should they consider to avoid DNS resolution conflicts?

Disable DNS resolution for the VNet

Create separate private DNS zones for each service and link them to the VNet

Use a custom DNS server for all services

Use a single private DNS zone for all services

A company wants to offer a private connection to their custom application hosted on Azure VMs. They need to support multiple customers from different Azure AD tenants. What should they implement?

Azure VPN Gateway with multi-site VPN

Azure Application Gateway with WAF

Azure Private Link Service with visibility set to all tenants

Azure Private Endpoint on each VM

What must be identified before deploying an Azure Private Endpoint?

The public IP address of the service's existing endpoint

The target Azure service and its resource ID

The DNS zone name of the service's public domain

The number of network security groups required for the service

A company wants to expose a legacy application running on a single VM to a partner via Private Link. What is the minimum Azure resource required in front of the VM?

An Azure Load Balancer (internal)

Microsoft Certified:Azure Network Engineer Associate

Domain 4Objective 1

Design and Implement Azure Private Link Service and Azure Private Endpoints AZ-700 Practice Questions (Page 1)

Part of the Design and implement private access to Azure services domain, which accounts for 10–15% of the AZ-700 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~4–10 in this domain), expect 2–5 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

8concepts

10–15%of the exam

Questions 1–5

1application · medium
A company runs a custom application on Azure VMs behind an internal load balancer. They want to expose this application to a specific partner organization that has its own Azure subscription. The partner will create a private endpoint to connect. The company wants to ensure that only the partner's subscription can create private endpoints to this service. What should they configure on the Private Link Service?
Select an answer first
2application · medium
A company plans to deploy private endpoints for multiple Azure services in the same VNet. What should they consider to avoid DNS resolution conflicts?
Select an answer first
3application · medium
A company wants to offer a private connection to their custom application hosted on Azure VMs. They need to support multiple customers from different Azure AD tenants. What should they implement?
Select an answer first
4foundation · easy
What must be identified before deploying an Azure Private Endpoint?
Select an answer first
5application · medium
A company wants to expose a legacy application running on a single VM to a partner via Private Link. What is the minimum Azure resource required in front of the VM?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-700

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-700” is a trademark of its owner, used for identification only.