Exam AZ-720 topic 3 question 5 discussion

D. Deploy a private endpoint for SQL1. A private endpoint is a network interface that connects you privately and securely to a service powered by Azure Private Link. Private endpoint uses a private IP address from your VNet, effectively bringing the service into your VNet. This will allow on-premises users to access SQL1 over the site-to-site VPN using a private IP address. Option A would not solve the problem because the DNS record alone would not change the network path or permissions required to access SQL1. Option B may not be necessary if the correct network security group rules already exist. Option C would not solve the issue because a service endpoint only allows resources within a subnet to communicate with Azure SQL over the Azure backbone network, not with on-premises resources. Option E (ExpressRoute) would not solve the issue because it would not change the way the on-premises network communicates with the Azure SQL Database. It would simply provide a different connection path to Azure.