Finance wants Azure SQL and storage reachable only from inside the city’s Virtual Network, not from the open internet. Which feature provides that private access pattern?
Select an answer to reveal the explanation.
Short Explanation
Locking SQL or storage to VNet-only reachability is the private endpoint play — a private IP inside your network. Public endpoints face the internet; Advisor tips are not NICs. Keep backend data on the private path.
Full Explanation
A private endpoint assigns a private IP address from your Virtual Network to an Azure PaaS service such as storage or Azure SQL, enabling access over the private network. AZ-900 expects candidates to identify that pattern when services must not rely on public internet exposure.