Design and Implement Azure Private Link Service and Azure Private Endpoints AZ-700 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company runs a custom line-of-business application on a Standard internal load balancer (ILB) in VNet-A. They want to expose this application privately to consumers in VNet-B using Azure Private Link Service. They create a Private Link Service and associate it with the ILB's frontend IP configuration. After creating a private endpoint in VNet-B and approving the connection, consumers report that connections to the private endpoint time out. The private endpoint's connection state shows 'Approved'. What should you check first?

   • AThe load balancer's backend pool includes the application VMs and the health probe is passing.
   • BThe consumer's VNet has a private DNS zone for the Private Link Service's alias.
   • CThe Private Link Service's source IP NAT is configured with a subnet.
   • DThe Private Link Service's visibility is set to 'All tenants'.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which scenario is a typical use case for Azure Private Link Service?

   • AProtecting a web application from DDoS attacks
   • BProviding a SaaS application to customers with private connectivity from their virtual networks
   • CRouting traffic between Azure regions using Azure Front Door
   • DConnecting two virtual networks using VNet peering
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company has a Private Link Service behind an internal load balancer. On-premises clients connect via ExpressRoute. They report intermittent timeouts. The service's NSG allows traffic from the on-premises IP range. What is the most likely cause?

   • AThe ExpressRoute circuit is down
   • BThe load balancer's health probe is misconfigured
   • CThe on-premises firewall is blocking the private IP range
   • DThe private endpoint's DNS is not resolving
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which Azure service can you create a Private Endpoint for?

   • AAzure SQL Database
   • BAzure Network Security Group
   • CAzure Virtual Machines
   • DAzure Virtual Network
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is a prerequisite for on-premises clients to resolve the DNS name of a service accessed via Private Endpoint?

   • AA network security group rule allowing DNS traffic from on-premises
   • BA public DNS record pointing to the service's public IP
   • CA VPN connection to the service's public endpoint
   • DA DNS forwarder or conditional forwarder to Azure Private DNS
   Reveal Solution Discussion Select an answer first