AZ-700 Private Endpoints and Private Link

Question 1

What is an Azure Private Endpoint?

Accepted Answer

A network interface with a private IP that connects to an Azure service via Private Link

Answer

A public IP address assigned to an Azure PaaS service

Answer

A VNet peering connection to a PaaS service

Answer

A DNS alias for an Azure service

Question 2

Which Azure service lets you expose your own application (running behind an Azure Standard Load Balancer) to other VNets using Private Link?

Accepted Answer

Azure Private Link Service

Answer

Azure Private Endpoint

Answer

Azure Service Endpoint

Answer

Azure VNet Integration

Question 3

When a Private Endpoint is created, what network policy must be disabled on the subnet to allow the private IP assignment?

Accepted Answer

Private endpoint network policies (PrivateEndpointNetworkPolicies)

Answer

Network Security Group policies

Answer

Route table policies

Answer

Service endpoint policies

Question 4

What connection approval model allows a Private Link consumer to connect without requiring explicit approval from the provider?

Accepted Answer

Auto-approval

Answer

Manual approval

Answer

Role-based approval

Answer

Cross-tenant approval

Question 5

Which statement is TRUE about network traffic flowing through a Private Endpoint?

Accepted Answer

Traffic stays entirely within the Microsoft backbone and never crosses the public internet

Answer

Traffic traverses the public internet with encryption

Answer

Traffic is routed through Azure Firewall by default

Answer

Traffic uses BGP routing over ExpressRoute

Question 6

Which Azure PaaS services natively support Private Endpoints? (Select the most comprehensive answer)

Accepted Answer

A wide range including Storage, SQL, Key Vault, App Service, ACR, Event Hubs, and more

Answer

Only Azure Storage and Azure SQL Database

Answer

Only Azure Key Vault and Azure Cosmos DB

Answer

Only first-party Microsoft services in the East US region