nerdexam
Microsoft

AZ-500 · Question #558

You have an Azure subscription that contains the resources shown in the following table. App1 uses Function1, SQL1, and storage1. You need to secure the traffic between App1, Function1, SQL1, and…

App1 can communicate securely with SQL1, storage1, and Function1 using private endpoints, as all these Azure services support private endpoint connectivity from a virtual network.

Submitted by satoshi_tk· Mar 6, 2026Secure networking

Question

You have an Azure subscription that contains the resources shown in the following table. App1 uses Function1, SQL1, and storage1. You need to secure the traffic between App1, Function1, SQL1, and storage1, by using private endpoints. With which resources can App1 communicate by using a private endpoint?

Exhibits

AZ-500 question #558 exhibit 1
AZ-500 question #558 exhibit 2

Options

  • ASQL1 only
  • Bstorage1 only
  • CFunction1 only
  • DSQL1 and storage1 only
  • Estorage1 and Function1 only
  • Fstorage1, SQL1, and Function1

Why each option

App1 can communicate securely with SQL1, storage1, and Function1 using private endpoints, as all these Azure services support private endpoint connectivity from a virtual network.

ASQL1 only

This is incomplete, as Storage1 and Function1 (under certain plans) also support private endpoints.

Bstorage1 only

This is incomplete, as SQL1 and Function1 (under certain plans) also support private endpoints.

CFunction1 only

This is incomplete, as SQL1 and Storage1 also support private endpoints.

DSQL1 and storage1 only

This is incomplete, as Function1 can also support private endpoints if hosted on a Premium or Dedicated plan.

Estorage1 and Function1 only

This is incomplete, as SQL1 also supports private endpoints.

Fstorage1, SQL1, and Function1

Concept tested: Azure Private Link and service integration

Source: https://learn.microsoft.com/azure/private-link/private-endpoint-overview

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice