A private endpoint resolves correctly from the hub but to a public address from a spoke. Packet routing between them is already valid. What should be checked first?

Choose the single best answer.

A.Assume every private endpoint automatically publishes private answers to every VNet
B.Increase ExpressRoute bandwidth while leaving DNS unchanged
C.Private-zone links and DNS forwarding or resolver configuration for the spoke
D.Only NSG permissions, assuming working routing guarantees private name resolution

Show the answer and explanation

✓ Correct answer

Private-zone links and DNS forwarding or resolver configuration for the spoke

Zone visibility and resolver paths can differ between VNets even with working routing. Packet permissions and bandwidth do not correct DNS, and private endpoint creation does not universally link its records to every VNet. Source guide: PDF page(s) 58.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.