Exam AZ-104 topic 2 question 97 discussion

keywords- when you see backbone - remember endpoints

Hey, Cloud network engineer here. Yes both Private endpoint + Service endpoint is good. Difference between them is that private endpoint will have its own private IP in your VNET Service Endpoint is still a public IP (towards for exapmle a Storage Account) But Microsoft would know to route it in its Microsoft Backbone network

Virtual Network (VNet) service endpoint provides secure and direct connectivity to Azure services over an optimized route over the Azure backbone network. Endpoints allow you to secure your critical Azure service resources to only your virtual networks. Service Endpoints enables private IP addresses in the VNet to reach the endpoint of an Azure service without needing a public IP address on the VNet. https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview

sometimes it is prive endpoints

500 and 400 repeated

A. Azure AD Application Proxy B. service endpoints C. a network security group (NSG) D. Azure Firewall

No doubts here

Correct. "Virtual Network (VNet) service endpoint provides secure and direct connectivity to Azure services over an optimized route over the Azure backbone network." https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview