Your company subscribes to a third-party analytics service that the vendor publishes through Private Link. What must you provision inside your own network to reach it privately?
Show answer and explanation
Answer: D
Consumers reach a provider's Private Link service by creating a private endpoint in their own virtual network. That endpoint receives a private IP address and forwards traffic to the vendor's service over the Microsoft backbone, without exposing either network to the other. Service endpoints apply only to Azure PaaS resources and do not connect to services published by other tenants. Peering would require connecting networks you do not control.
Why the other options are wrong
- A. Service endpoints extend subnet identity to Azure PaaS public endpoints. They cannot connect to a service published by another tenant through Private Link.
- B. Peering with a vendor network would expose address spaces to each other and requires the vendor to share its network. Private Link is designed to avoid this.
- C. A public IP on your gateway exposes that endpoint publicly and sends the analytics traffic across public paths, which contradicts a private consumption design.