A company has an Azure Storage account with a private endpoint in VNet-A. Developers in VNet-B need to access the storage account privately. They create a private endpoint in VNet-B and set the private endpoint connection's 'Request only' option. The storage account owner then approves the connection. However, developers in VNet-B still cannot access the storage account. What is the most likely reason?

The private endpoint connection in VNet-B is in 'Pending' state because the owner did not approve it.

The storage account requires a private endpoint for each service (blob, file, table, queue) and only the blob endpoint was created.

The private endpoint in VNet-B does not have a private DNS zone configured for the storage account's blob endpoint.

The storage account's firewall is set to 'Deny all' for public networks.

A developer creates a private endpoint for a storage account in a VNet. They want to ensure that all traffic from the VNet to the storage account uses the private endpoint. What should they do?

Disable public network access on the storage account

Delete the storage account's public DNS record

Create a network security group rule to block the public IP

What is the purpose of DNS integration with Azure Private Link?

To block DNS resolution for the service from the internet

To resolve the service's public DNS name to the private IP address of the Private Endpoint

To create a new DNS zone for the service in the public internet

To provide a public DNS name for the Private Endpoint

A company plans to deploy private endpoints for multiple Azure services (Storage, SQL, Key Vault) in a single VNet. They want to minimize the number of private DNS zones and simplify DNS management. What should they do?

Use Azure-provided DNS without any private DNS zones.

Create a single private DNS zone named 'privatelink.azure.com' and link it to the VNet.

Create a private DNS zone for each private endpoint and link them to the VNet.

Create one private DNS zone for each service type and link all zones to the VNet.

What is the primary purpose of an Azure Private Endpoint?

To filter network traffic to an Azure service using network security group rules

To provide a public IP address for an Azure service to be accessed over the internet

To assign a static private IP address from your virtual network to an Azure service, enabling access over a private connection

To create a VPN gateway connection between your on-premises network and Azure

Microsoft Certified:Azure Network Engineer Associate

Domain 4Objective 1

Design and Implement Azure Private Link Service and Azure Private Endpoints AZ-700 Practice Questions (Page 6)

Part of the Design and implement private access to Azure services domain, which accounts for 10–15% of the AZ-700 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~4–10 in this domain), expect 2–5 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

8concepts

10–15%of the exam

Questions 26–30

26application · medium
A company has an Azure Storage account with a private endpoint in VNet-A. Developers in VNet-B need to access the storage account privately. They create a private endpoint in VNet-B and set the private endpoint connection's 'Request only' option. The storage account owner then approves the connection. However, developers in VNet-B still cannot access the storage account. What is the most likely reason?
Select an answer first
27application · medium
A developer creates a private endpoint for a storage account in a VNet. They want to ensure that all traffic from the VNet to the storage account uses the private endpoint. What should they do?
Select an answer first
28foundation · easy
What is the purpose of DNS integration with Azure Private Link?
Select an answer first
29application · medium
A company plans to deploy private endpoints for multiple Azure services (Storage, SQL, Key Vault) in a single VNet. They want to minimize the number of private DNS zones and simplify DNS management. What should they do?
Select an answer first
30foundation · easy
What is the primary purpose of an Azure Private Endpoint?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-700

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-700” is a trademark of its owner, used for identification only.