Microsoft Azure Fundamentals AZ-900 Practice Question

By using Azure Private Endpoint, you can securely connect to Azure services over a private link within your virtual network, eliminating exposure to the public internet. This feature assigns a private IP address from your VNet to the Azure service. In contrast, Azure Service Endpoint extends your VNet to Azure services but still routes traffic over the public internet. Azure VPN Gateway provides encrypted VPN tunnels over the public internet for connecting on-premises networks to Azure. Azure ExpressRoute offers a private, dedicated connection between your on-premises network and Azure but requires a physical link and is not used for connecting VNets directly to Azure services.