Microsoft Azure Fundamentals AZ-900 Practice Question

A Private Endpoint provides a private IP address in your virtual network for connecting to Azure services, ensuring that the traffic remains within the Azure backbone network and doesn't traverse the public internet. A VPN Gateway connects on-premises networks to Azure over a public endpoint, which can involve internet traffic. A Public Endpoint exposes services directly to the internet, which doesn't meet the requirement. An Application Gateway is used for load balancing web traffic and doesn't provide private connectivity to Azure services.