Exam AZ-700 topic 5 question 25 discussion

Actual exam question from Microsoft's AZ-700

Question #: 25
Topic #: 5

DRAG DROP
-

You have an Azure subscription that contains the resources shown in the following table.

You discover that users connect directly to App1.

You need to meet the following requirements:

• Administrators must only access App1 by using a private endpoint.
• All user connections to App1 must be routed through FD1.
• The downtime of connections to App1 must be minimized.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Show Suggested Answer

Suggested Answer:

by emsaho at Sept. 12, 2023, 9:23 a.m.

Comments

Submit Cancel

bobothewiseman

4 months ago

My take Create the private endpoint for App1. 2. Configure FD1 to enable the Private Link service. 3. Update the DNS record for app1.contoso.com to point to FD1. No need to manually approve the private endpoint connection separately as this is part of the process of creating the private endpoint and configuring FD1 properly.

upvoted 1 times

...

jayek

9 months, 2 weeks ago

https://learn.microsoft.com/en-us/azure/private-link/private-endpoint-overview#limitations:~:text=service%20access.-,DNS%20configuration,-The%20DNS%20settings

upvoted 1 times

...

emsaho

1 year, 2 months ago

It is correct, from https://learn.microsoft.com/en-us/azure/frontdoor/private-link

upvoted 2 times

fred99

1 year, 2 months ago

No it is not. Review your link it says: When you enable Private Link to your origin in Azure Front Door Premium, Front Door creates a private endpoint on your behalf. My take: Change DNS record of app1 configure the origin group approve the private endpoint connection

upvoted 6 times

ironbornson

1 year, 2 months ago

You have to minimize impact on users, so wouldn't it be? 1-configure the origin group 2-approve the private endpoint connection 3-Change DNS record of app1

upvoted 37 times

sirio

10 months ago

Makes sense. The link above says: "After you enable an origin for Private Link and approve the private endpoint connection, it can take a few minutes for the connection to be established. During this time, requests to the origin will receive an Azure Front Door error message. The error message will go away once the connection is established."

upvoted 1 times

bilzi

4 months ago

It says "In the settings of FD1, configure the origin group to enable the Azure Private Link Service", which means the origin group already exists. So you should change the dns to point to AZFD first, the URL will continue to work but now through AZFD. But you are still missing the "• Administrators must only access App1 by using a private endpoint." part of the question. So now enable private link in the origin group, and then approve the request for the pending private endpoint in the settings of APP1. This will minimize the downtime.

upvoted 1 times

...