An on-premises application has VPN reachability to a Storage private endpoint but resolves the normal service name to a public address. Which two elements should be verified? Select 2 answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

A.Correct private endpoint records and links in the intended Azure private DNS zone
B.Replace the application's hostname with a raw IP and disregard TLS matching
C.On-premises forwarding to a suitable reachable Private Resolver inbound endpoint or supported DNS forwarding path
D.Only the outbound Resolver endpoint, because inbound hybrid queries cannot use an inbound endpoint
E.Assume a connected VPN automatically changes all DNS responses

Show the answer and explanation

✓ Correct answers

Correct private endpoint records and links in the intended Azure private DNS zone
On-premises forwarding to a suitable reachable Private Resolver inbound endpoint or supported DNS forwarding path

Private records and zone access plus on-premises-to-Azure forwarding make the service name resolve to the endpoint IP. Outbound resolver endpoints handle the opposite selected-query direction, direct IP can break TLS and SDK expectations, and VPN reachability does not automatically configure DNS. Source guide: PDF page(s) 58.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.