Exam AZ-305 topic 4 question 114 discussion

Box 1: Configure a dedicated managed virtual network Provision the Azure Synapse workspace with the option to Configure a dedicated managed virtual network. This will ensure that the traffic between Azure Synapse and Azure Cosmos DB is routed through the Microsoft backbone network and not over the internet. Box 2: Managed private endpoints Configure the Azure Cosmos DB account to use Managed private endpoints. This will allow Azure Synapse to securely connect to Azure Cosmos DB using a private link.

In the exam 11-Oct. Answers are right

CORRECT

Given answer is correct

Correct. Box 1: Configure a dedicated managed virtual network Managed private endpoints are only supported in Azure Synapse workspaces with a Managed workspace Virtual Network. Box 2: Managed private endpoints When you use Managed private endpoints, traffic between your Azure Synapse workspace and other Azure resources traverse entirely over the Microsoft backbone network. https://learn.microsoft.com/en-us/azure/synapse-analytics/security/synapse-workspace-managed-private-endpoints#managed-private-endpoints https://learn.microsoft.com/en-us/azure/synapse-analytics/security/synapse-workspace-managed-vnet

Hmm yeah you know what confused me. If an Azure service connects to another Azure service on an Azure public IP then that traffic will not leave the Azure backbone. Technically speaking does it traverse the internet? I don't think so. That said reading the other comments has put me right (thanks OrangeSG, Elecktrus and KakashiCopyNinja). I'm sure you're right.

Correct. https://learn.microsoft.com/en-us/azure/cosmos-db/analytical-store-private-endpoints#enable-a-private-endpoint-for-the-analytical-store https://learn.microsoft.com/en-us/azure/cosmos-db/analytical-store-private-endpoints#add-a-managed-private-endpoint-for-azure-cosmos-db-analytical-store https://learn.microsoft.com/en-us/azure/cosmos-db/analytical-store-private-endpoints