Microsoft SC-500 Exam - Topic 1 Question 9 Discussion

Use a private endpoint, specifically a managed private endpoint created from the Azure Synapse managed virtual network to the Azure Storage account.

Microsoft explains that managed private endpoints are private endpoints created within the managed virtual network associated with an Azure Synapse workspace. They establish Azure Private Link connectivity to services such as Azure Storage and ensure that traffic remains on the Microsoft backbone rather than traversing the public network. Microsoft Learn

For a secured Azure Storage account, Microsoft explicitly recommends creating a Synapse workspace with a managed virtual network and then establishing a managed private endpoint to the storage account. The storage-account administrator must approve the private endpoint connection before the private link becomes operational. Microsoft Learn

Virtual network peering isn't the mechanism used to connect a Synapse managed VNet directly to a PaaS Storage endpoint. An NSG controls packet filtering but does not establish the required private PaaS connection. A virtual network gateway is used for scenarios such as VPN or ExpressRoute connectivity and is unnecessary here.

Therefore, among the available selections, private endpoint is the correct component.

Correct answer: A

===============