Design and Implement Azure Private Link Service and Azure Private Endpoints AZ-700 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   Fabrikam runs a web service on a VM in a VNet. They want to expose it privately to customers in other Azure VNets and on-premises. What should they deploy?

   • AAzure Private Link Service behind an internal load balancer
   • BAzure VPN Gateway with site-to-site VPN
   • CAzure Private Endpoint on the VM's NIC
   • DAzure Application Gateway with a public IP
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   Contoso has a storage account with a private endpoint in a VNet. On-premises users resolve the storage account name to the public IP. You need to ensure on-premises users resolve the storage account to the private IP of the endpoint. What should you do?

   • AAssign a public IP to the private endpoint
   • BAdd a CNAME record in the public DNS zone pointing to the private endpoint
   • CCreate a private DNS zone and link it to the on-premises DNS server
   • DConfigure conditional forwarding on the on-premises DNS server to Azure-provided DNS
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the function of Azure Private Link Service?

   • ATo enable your own service to be accessed privately by consumers through Private Endpoints
   • BTo provide a public endpoint for your own service so it can be accessed over the internet
   • CTo filter traffic to your service using network security groups
   • DTo create a VPN connection between your service and on-premises networks
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company has a Key Vault named 'contosokv'. They want to allow a specific VNet to access the Key Vault privately. They create a private endpoint in the VNet. Which target sub-resource should they select when creating the private endpoint?

   • Akeyvault
   • Bvault
   • Cdefault
   • Dsecret
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company has a Private Link Service exposing an application behind an internal load balancer. On-premises clients connect via ExpressRoute. The on-premises DNS server resolves the application's hostname to the private endpoint's IP. However, on-premises clients cannot connect. The private endpoint connection is approved. What is the most likely cause?

   • AThe on-premises DNS server is not using a conditional forwarder.
   • BThe private endpoint's connection is in 'Pending' state.
   • CThe Private Link Service's visibility is set to 'All tenants'.
   • DThe on-premises network does not have a route to the VNet where the private endpoint is deployed.
   Reveal Solution Discussion Select an answer first