Your Azure subscription is associated with the Azure AD tenant contoso.onmicrosoft.com. The subscription contains: an App Service app named App1, a public DNS zone contoso.com, a private DNS zone private.contoso.com, and a virtual network Vnet1. You create a private endpoint for App1; the private endpoint record is automatically registered in Azure DNS. Which DNS name is registered for the private endpoint?

When you create a private endpoint for an Azure App Service app, Azure automatically registers a DNS record in a private DNS zone. This record uses the format [app-name].privatelink.azurewebsites.net. This specific domain is part of Azure's private link service and ensures that traffic to the App Service app resolves to the private IP address of the private endpoint within your virtual network, bypassing the public internet. The other options are incorrect because contoso.onmicrosoft.com is the Azure AD tenant domain, not used for private endpoints; private.contoso.com is a custom private DNS zone that would require manual configuration; and contoso.com is a public DNS zone, which would defeat the purpose of a private endpoint.