0
0
Azurecloud~10 mins

Private Link for secure service access in Azure - Interactive Code Practice

Choose your learning style9 modes available
Practice - 5 Tasks
Answer the questions below
1fill in blank
easy

Complete the code to create a Private Endpoint in Azure.

Azure
az network private-endpoint create --name myPrivateEndpoint --resource-group myResourceGroup --vnet-name myVNet --subnet mySubnet --private-connection-resource-id [1] --group-ids blob --connection-name myConnection
Drag options to blanks, or click blank then click option'
A/subscriptions/xxxx/resourceGroups/myResourceGroup/providers/Microsoft.Sql/servers/mySqlServer
B/subscriptions/xxxx/resourceGroups/myResourceGroup/providers/Microsoft.Compute/virtualMachines/myVM
C/subscriptions/xxxx/resourceGroups/myResourceGroup/providers/Microsoft.Storage/storageAccounts/myStorageAccount
D/subscriptions/xxxx/resourceGroups/myResourceGroup/providers/Microsoft.Network/virtualNetworks/myVNet
Attempts:
3 left
💡 Hint
Common Mistakes
Using a resource ID for a VM or VNet which does not support Private Link in this context.
2fill in blank
medium

Complete the code to approve a Private Endpoint connection request.

Azure
az network private-endpoint-connection [1] --resource-group myResourceGroup --name myStorageAccount --private-endpoint-connection-name myConnection --approval-description "Approved"
Drag options to blanks, or click blank then click option'
Aapprove
Bshow
Creject
Ddelete
Attempts:
3 left
💡 Hint
Common Mistakes
Using 'reject' or 'delete' instead of 'approve' to allow the connection.
3fill in blank
hard

Fix the error in the command to create a Private DNS Zone for Private Link.

Azure
az network private-dns zone create --resource-group myResourceGroup --name [1]
Drag options to blanks, or click blank then click option'
Aprivatelink.compute.windows.net
Bprivatelink.vnet.azure.com
Cprivatelink.database.windows.net
Dprivatelink.storage.windows.net
Attempts:
3 left
💡 Hint
Common Mistakes
Using DNS zone names that do not match the service's Private Link zone.
4fill in blank
hard

Fill both blanks to create a Private Endpoint and link it to a Private DNS Zone.

Azure
az network private-endpoint create --name myPrivateEndpoint --resource-group myResourceGroup --vnet-name myVNet --subnet mySubnet --private-connection-resource-id [1] --group-ids [2] --connection-name myConnection
Drag options to blanks, or click blank then click option'
A/subscriptions/xxxx/resourceGroups/myResourceGroup/providers/Microsoft.Sql/servers/mySqlServer
BsqlServer
Cblob
D/subscriptions/xxxx/resourceGroups/myResourceGroup/providers/Microsoft.Storage/storageAccounts/myStorageAccount
Attempts:
3 left
💡 Hint
Common Mistakes
Mixing Storage resource ID with SQL group ID or vice versa.
5fill in blank
hard

Fill all three blanks to configure a Private Endpoint, approve the connection, and link the Private DNS Zone.

Azure
az network private-endpoint create --name [1] --resource-group myResourceGroup --vnet-name myVNet --subnet mySubnet --private-connection-resource-id [2] --group-ids [3] --connection-name myConnection
Drag options to blanks, or click blank then click option'
AmyPrivateEndpoint
B/subscriptions/xxxx/resourceGroups/myResourceGroup/providers/Microsoft.Storage/storageAccounts/myStorageAccount
Cblob
D/subscriptions/xxxx/resourceGroups/myResourceGroup/providers/Microsoft.Sql/servers/mySqlServer
Attempts:
3 left
💡 Hint
Common Mistakes
Using SQL Server resource ID with Storage group ID or mismatching names.