A retailer's application runs in an Azure virtual network and stores product images in an Azure storage account. The security team requires the application to reach the storage account through a private address inside the virtual network, keeping that traffic off the public internet, instead of through the storage account's public address. Which Azure feature accomplishes this?

1. A. A public IP address attached to the storage account, so the application can reach it from anywhere on the internet 💬 A
2. B. A network security group on the application's subnet, which filters traffic sent to the storage account's public address 💬 B
3. C. A private endpoint, which gives the storage account a network interface with a private IP address from the virtual network ✓ C
4. D. A VPN gateway between the application's subnet and the storage account, creating an encrypted tunnel over the internet 💬 D

Revelar gabarito

Resposta correta: A private endpoint, which gives the storage account a network interface with a private IP address from the virtual network

Referência: https://learn.microsoft.com/en-us/azure/private-link/private-endpoint-overview