AdventureWorks is deploying Private Endpoints for Azure SQL and Azure Storage in a spoke VNet. The networking team must create the correct Private DNS zones so the services resolve to the private endpoint IP addresses inside the VNet. Which of the following sets contains the proper Private DNS zone names to cover Azure SQL and Blob storage private endpoints?

When using Azure Private Endpoints, you need to configure Private DNS zones to ensure that the service's FQDN resolves to the private IP address of the Private Endpoint within your virtual network. Azure defines specific naming conventions for these Private DNS zones. For Azure SQL Database, the correct Private DNS zone is privatelink.database.windows.net. For Azure Blob Storage, the correct Private DNS zone is privatelink.blob.core.windows.net. The other options are incorrect because they either omit the privatelink. prefix, which is essential for private endpoint resolution, or they mix the correct and incorrect formats. Without the privatelink. prefix, DNS resolution would typically direct traffic over the public internet, bypassing the Private Endpoint.