nerdexam
Microsoft

DP-300 · Question #188

You have an Azure virtual machine named VM1 on a virtual network named VNet1. Outbound traffic from VM1 to the internet is blocked. You have an Azure SQL database named SqlDb1 on a logical server…

The correct answer is C. a private endpoint. A private endpoint is a network interface that uses a private IP address from your virtual network. This network interface connects you privately and securely to a service powered by Azure Private Link. By enabling a private endpoint, you're bringing the service into your…

Submitted by rania.sa· Mar 6, 2026Implement a secure environment

Question

You have an Azure virtual machine named VM1 on a virtual network named VNet1. Outbound traffic from VM1 to the internet is blocked. You have an Azure SQL database named SqlDb1 on a logical server named SqlSrv1. You need to implement connectivity between VM1 and SqlDb1 to meet the following requirements: - Ensure that VM1 cannot connect to any Azure SQL Server other than SqlSrv1. - Restrict network connectivity to SqlSrv1. What should you create on VNet1?

Options

  • Aa VPN gateway
  • Ba service endpoint
  • Ca private endpoint
  • Dan ExpressRoute gateway

How the community answered

(21 responses)
  • A
    5% (1)
  • B
    14% (3)
  • C
    76% (16)
  • D
    5% (1)

Explanation

A private endpoint is a network interface that uses a private IP address from your virtual network. This network interface connects you privately and securely to a service powered by Azure Private Link. By enabling a private endpoint, you're bringing the service into your virtual network. The service could be an Azure service such as: - Azure Cosmos DB - Azure SQL Database - Your own service using a Private Link Service. https://docs.microsoft.com/en-us/azure/private-link/private-endpoint-overview

Topics

#private endpoint#network isolation#Azure SQL Database#VNet security

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full DP-300 Practice