StudyToCert

All certifications / Azure Administrator / Lessons

Microsoft Certified: Azure Administrator Associate AZ-104 · Domain 4: Implement and manage virtual networking

Service endpoints vs private endpoints, and private DNS zones for private link

▶ Watch the overview video

Last reviewed September 30, 2026 · Leer en español

Many Azure platform services, such as Azure Storage, Azure SQL Database and Azure Key Vault, are reached by default through public endpoints on the internet. Two features let resources in a virtual network (VNet) reach them more securely: service endpoints and private endpoints. They sound alike but work very differently, and choosing between them is a frequent exam scenario, usually decided by whether on-premises access, per-resource scope or fully disabled public access is required.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study Azure Administrator for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the Azure Administrator study plan