A Flexible Server instance must be accessible from on-premises via a private connection without internet exposure. Which network feature achieves this?
- A Service endpoint on the subnet
- B Private endpoint with Azure Private DNS Zone (correct answer)
- C VPN Gateway with public endpoint
- D ExpressRoute with public peering
Shortcut: A private endpoint creates a private IP for the Flexible Server in your VNet. Combined with Azure Private DNS zones, on-premises resources can resolve and connect to the private IP via ExpressRoute or VPN.