az-104 Practice Question 1737
Exam: az-104
Domain: Implement and manage virtual networking
Topic: Configure and manage virtual networks in Azure
Difficulty: medium
An organization wants to allow its developers to access a database server in a VNet from within the VNet but not from the internet. Which type of endpoint should they use, and what are the benefits of this approach?
Answer Options
A
Use a Public Endpoint
B
Deploy a Private Endpoint
C
Create a Service Endpoint
D
Set up a VNet Gateway
Correct Answer
B: Deploy a Private Endpoint
Explanation
The correct answer is to use a Private Endpoint. This approach ensures that the database server can only be accessed from within the VNet, enhancing security by preventing direct internet access. Private Endpoints provide a secure way to connect to backend resources without exposing them to the public internet. Other options like Public Endpoints or Service Endpoints would expose the database to the internet, which is not desirable for security reasons. Private Endpoints work by creating a private IP address for the resource within the VNet, allowing secure internal access.