Network Security for ASE and SQL Managed Instance

What you'll be asked

1. Which Azure feature is primarily used to provide private IP connectivity to an App Service Environment (ASE), ensuring it is not accessible via the public internet?
2. When deploying an Azure SQL Managed Instance, which networking requirement must be met for the subnet where the instance resides?
3. You need to connect an application hosted in an ASE to a SQL Managed Instance. Which mechanism is recommended to ensure the traffic stays on the Microsoft backbone and avoids the public internet?
4. When configuring Network Security Group (NSG) rules for a SQL Managed Instance, which of the following is a mandatory requirement for management traffic?
5. A security auditor notices that an ASEv3 is using a private endpoint. If the ASE is configured for internal-only access, how is DNS resolution handled for the application's domain name within the virtual network?

Answers and explanations come after you submit.