What should you create on VNet1?

You have an Azure virtual machine named VM1 on a virtual network named VNet1. Outbound traffic from VM1 to the internet is blocked.

You have an Azure SQL database named SqlDb1 on a logical server named SqlSrv1.

You need to implement connectivity between VM1 and SqlDb1 to meet the following requirements:

✑ Ensure that VM1 cannot connect to any Azure SQL Server other than SqlSrv1.

✑ Restrict network connectivity to SqlSrv1.

What should you create on VNet1?
A . a VPN gateway
B. a service endpoint
C. a private endpoint
D. an ExpressRoute gateway

View Answer

Answer: C

Explanation:

A private endpoint is a network interface that uses a private IP address from your virtual network. This network interface connects you privately and securely to a service powered by Azure Private Link. By enabling a private endpoint, you’re bringing the service into your virtual network.

The service could be an Azure service such as:

✑ Azure Storage

✑ Azure Cosmos DB

✑ Azure SQL Database

✑ Your own service using a Private Link Service.

Reference: https://docs.microsoft.com/en-us/azure/private-link/private-endpoint-overview