Exam AZ-104 topic 2 question 96 discussion

Actual exam question from Microsoft's AZ-104

Question #: 96
Topic #: 2

Your on-premises network contains a VPN gateway.

You have an Azure subscription that contains the resources shown in the following table.

You need to ensure that all the traffic from VM1 to storage1 travels across the Microsoft backbone network.

What should you configure?

A. Azure AD Application Proxy
B. private endpoints
C. a network security group (NSG)
D. Azure Peering Service

Show Suggested Answer

Suggested Answer: B 🗳️

by Batiste2023 at Nov. 2, 2023, 7:36 p.m.

Comments

Submit Cancel

Batiste2023

Highly Voted 1 year, 9 months ago

Selected Answer: B

Correct, that's what private endpoints are for. "A private endpoint is a network interface that uses a private IP address from your virtual network. This network interface connects you privately and securely to a service that's powered by Azure Private Link. By enabling a private endpoint, you're bringing the service into your virtual network." https://learn.microsoft.com/en-us/azure/private-link/private-endpoint-overview

upvoted 5 times

Batiste2023

1 year, 9 months ago

Ok, the following question seems to complicate things a bit - same scenario, different solution... Here is what MS says about the difference about private endpoints and service endpoints: "What is the difference between Service Endpoints and Private Endpoints? - Private Endpoints grant network access to specific resources behind a given service providing granular segmentation. Traffic can reach the service resource from on premises without using public endpoints. - A Service Endpoint remains a publicly routable IP address. A Private Endpoint is a private IP in the address space of the virtual network where the private endpoint is configured." https://learn.microsoft.com/en-us/azure/private-link/private-link-faq#what-is-the-difference-between-service-endpoints-and-private-endpoints- From what I read here, both service endpoints and private endpoints seem a viable solution to the requirements stated.

upvoted 3 times

...