Design and Implement Azure Private Link Service and Azure Private Endpoints AZ-700 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which benefit does Azure Private Endpoint provide for securing access to Azure services?

   • AIt allows the service to be accessed only from the public IP address of the virtual network
   • BIt keeps traffic between the virtual network and the service within the Microsoft backbone network
   • CIt eliminates the need for any network security group rules on the virtual network
   • DIt exposes the service to the internet with a public endpoint that is protected by DDoS protection
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which Azure resource is commonly used to integrate DNS with Private Endpoints?

   • AAzure Public DNS zone
   • BAzure Front Door
   • CAzure Private DNS zone
   • DAzure Traffic Manager profile
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   An on-premises client uses a VPN to connect to Azure. They need to access a storage account via a private endpoint. The client's DNS resolves the storage account to the public IP. What should you configure?

   • AA site-to-site VPN with DNS settings
   • BA public DNS record with the private IP
   • CConditional forwarding on the on-premises DNS to Azure DNS
   • DA private DNS zone linked to the VPN gateway subnet
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company has a Private Link Service named 'pls-contoso' with an auto-approval list that includes subscription 'Sub-A'. A consumer in Sub-A creates a private endpoint to 'pls-contoso'. What is the connection state and what action is required?

   • AThe connection is in 'Pending' state; the service provider must manually approve it.
   • BThe connection is in 'Pending' state; the consumer must approve it.
   • CThe connection is automatically approved; no action is required.
   • DThe connection is in 'Rejected' state because the consumer is not in the visibility list.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   How can on-premises clients connect to a service exposed via Azure Private Link Service?

   • ABy using Azure Front Door to route traffic to the Private Link Service
   • BBy accessing the service's public IP address over the internet
   • CBy using a VPN gateway or ExpressRoute connection to the virtual network that hosts the Private Endpoint
   • DBy using a site-to-site VPN directly to the Private Link Service
   Reveal Solution Discussion Select an answer first