Which ACR network feature allows restricting pull/push access to specific Azure virtual network subnets?
- A Private endpoint only
- B Service endpoint rules or private endpoint (Premium SKU) (correct answer)
- C Network Security Group (NSG) attached to ACR
- D DNS private zone
Shortcut: ACR Premium supports both service endpoint-based virtual network rules and private endpoints to restrict registry access to specific VNet subnets.