Which network control allows only a specific VNet subnet to reach the vault while keeping the public endpoint?
- A Private endpoint
- B A virtual network rule (service endpoint) in the vault firewall (correct answer)
- C NSG on the vault
- D Azure Firewall
Shortcut: KeyVault service endpoint enabled.
Virtual network rules restrict the public endpoint to traffic originating from designated subnets with the Microsoft.KeyVault service endpoint enabled.