The compost-lab storage account must be reachable only at an IP inside the VNet. Which control should the security engineer implement?
Select an answer to reveal the explanation.
Short Explanation
Need a private IP in your subnet for Storage? That’s Private Endpoint—Private Link parks a NIC in the VNet. Service Endpoint still talks to the public VIP.
Full Explanation
A Private Endpoint uses Private Link to map a PaaS resource to a network interface with a private IP in your subnet, so clients reach the resource on the VNet address space. A Service Endpoint improves the path to the public VIP from the VNet but does not give the account a private IP. Service endpoint policies limit which accounts a Service Endpoint may reach; they do not create a private NIC. A public load balancer frontend is the opposite of private-only access.