StudyByteLearn
← AZ-305: Azure Infrastructure Solutions
AZ-305 · Network design

Practice question 340 of 400 · medium

An application reaches a private endpoint by IP but fails certificate hostname validation. Which design best preserves normal TLS and SDK behavior?

Choose the single best answer.

  1. A.Disable certificate validation permanently
  2. B.Treat NSG allow rules as certificate validation
  3. C.Publish the private IP as a public certificate name without changing application design
  4. D.Use the normal service hostname and correct private DNS resolution
Show the answer and explanation

✓ Correct answer

  • Use the normal service hostname and correct private DNS resolution

Normal hostnames retain the certificate identity and SDK contract while DNS maps to the private endpoint. Disabling validation weakens confidentiality assurance, an arbitrary IP does not automatically match the certificate, and NSGs cannot validate TLS hostnames. Source guide: PDF page(s) 58.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.