Question
An Azure Machine Learning workspace processes sensitive training data.
The workspace must NOT be accessible from the public internet.
You need to restrict network access.
Which configuration should you implement?
- A. Azure Firewall rules
- B. Private endpoints Correct
- C. Network security groups
- D. Service endpoints
Explanation
A private endpoint gives the workspace private IP addresses inside a virtual network through Azure Private Link, and with public network access disabled the workspace accepts connections only over those private addresses. Azure Firewall and network security groups filter traffic for resources in your virtual networks but do not take the workspace's public endpoint off the internet. Service endpoints are not the mechanism Azure Machine Learning uses to make the workspace itself private.
