SC-100 Practice Question 3965
Exam: SC-100
Domain: Design security solutions for infrastructure
Difficulty: medium
You are designing a secure network connectivity architecture for Azure PaaS services (e.g., Azure Key Vault, Azure SQL). You need to ensure traffic between VNets and PaaS services traverses the Microsoft backbone network and is unreachable from the public internet. What should you implement?
Answer Options
A
Azure Private Endpoints (Azure Private Link)
B
Public internet routing with IP whitelisting
C
DirectAccess client tunnels
D
Unencrypted Telnet on port 23
Correct Answer
A: Azure Private Endpoints (Azure Private Link)
Explanation
Azure Private Endpoints (powered by Azure Private Link) assign private IP addresses from your VNet to Azure PaaS services, eliminating public internet exposure.