az-305 Practice Question 1972
Exam: az-305
Domain: Design infrastructure solutions
Topic: Design network solutions
Difficulty: medium
A company wants to ensure that its Azure services can be accessed only from specific on-premises locations and that these services cannot be accessed directly from the internet. Which Azure service should be used to achieve this, and how should it be configured?
Answer Options
A
Deploy Hub-Spoke topology to organize virtual networks.
B
Configure Azure Virtual WAN to establish a private connection to on-premises locations.
C
Set up Network Security Groups (NSGs) to control traffic flow.
D
Create a Private Endpoint for the Azure service to be accessed from specific on-premises locations.
Correct Answer
D: Create a Private Endpoint for the Azure service to be accessed from specific on-premises locations.
Explanation
Private Link can be used to privately connect Azure services to on-premises locations, ensuring that the services can only be accessed from those specific locations and not directly from the internet. Azure Virtual WAN is used for global connectivity and does not provide private connections to on-premises locations. Hub-Spoke topology is used for organizing virtual networks but does not provide private connections. Network Security Groups (NSGs) can control inbound and outbound traffic but do not provide private connections to on-premises locations.