問題文
A key vault must be reachable from a subnet. The team is choosing between a service endpoint rule and a private endpoint. Which statement correctly captures the difference that matters here?
選択肢
- A service endpoint rule requires a private DNS zone so that the vault name resolves inside the virtual network, while a private endpoint keeps the public name resolution unchanged.
- A private endpoint automatically denies public network access to the vault, so no further configuration is needed to close the public path once it is created. The service endpoint rule would still leave the public path open.
- With a service endpoint rule the vault is still reached at its public endpoint address; with a private endpoint the vault gets a private address in the virtual network and name resolution must be adjusted.
- Both give the vault a private address; the difference is only in cost.