What does enabling Key Vault private endpoint achieve?
- A Enables Key Vault geo-replication
- B Restricts Key Vault to accept requests only from the connected VNet via a private IP (correct answer)
- C Enables HSM-backed keys
- D Provides a secondary Key Vault in another region
Shortcut: A private endpoint assigns a private IP to Key Vault within the VNet. Combined with disabling public network access, this ensures the vault is only reachable from within the VNet.