Home › Azure AZ-104 › cloudcomputing › az104networkmonitor › An organisation needs to allow VNet-private acce…
An organisation needs to allow VNet-private access to Azure Storage and Cosmos DB WITHOUT routing traffic over the public internet. Which combination is correct?
AService Endpoints (for storage/SQL/etc.) or Private Endpoints (private IP inside the VNet) for finer control
BForce all traffic through Front Door
CAlways use Azure Bastion to reach databases
DPublic endpoints on all resources
Answer & Solution
Correct answer: A. Service Endpoints (for storage/SQL/etc.) or Private Endpoints (private IP inside the VNet) for finer control
Service Endpoints expose Microsoft services over the VNet boundary; Private Endpoints give each service a private IP inside the VNet. Public endpoints defeat the requirement; Bastion is for SSH/RDP, not data plane; Front Door is L7 routing.
Related questions
Which Azure recovery solution replicates VMs to another region for disaster recovery with Which Azure feature lets you query logs across multiple subscriptions and produce metric-sAn Azure VM's outbound internet access stops working after an NSG rule change. The team chWhich Azure load balancing layer operates at L4 (TCP/UDP) and supports public + internal bWhich Azure service consolidates and automates BACKUP across VMs, SQL on VMs, Azure Files,Which Azure feature provides centralised log + metric collection for resources, with custoWhich Azure resource lets you connect two VNets in different regions privately over MicrosWhich Azure service connects an on-premises datacentre to an Azure VNet over a dedicated,