📝 Section Review: Private Access & Monitoring
اہم نکاتKey TakeawaysKey Takeaways
- Private Endpoint PaaS resource (storage, SQL, Key Vault) کو آپ کے VNet کے اندر private IP دیتا ہے۔Private Endpoint PaaS resource (storage, SQL, Key Vault) ko aap ke VNet ke andar private IP deta hai.A Private Endpoint gives a PaaS resource (storage, SQL, Key Vault) a private IP inside your VNet.
- Private DNS zones PaaS FQDNs کو private IPs سے resolve کرتی ہیں؛ zone کو VNet سے auto-registration کے ساتھ link کریں۔Private DNS zones PaaS FQDNs ko private IPs se resolve karti hain; zone ko VNet se auto-registration ke saath link karein.Private DNS zones resolve PaaS FQDNs to private IPs; link the zone to the VNet with auto-registration.
- Hybrid DNS کے لیے on-premises queries کو Azure DNS (168.63.129.16) یا DNS Private Resolver inbound endpoint کی طرف forward کریں۔Hybrid DNS ke liye on-premises queries ko Azure DNS (168.63.129.16) ya DNS Private Resolver inbound endpoint ki taraf forward karein.For hybrid DNS, forward on-premises queries to Azure DNS (168.63.129.16) or a DNS Private Resolver inbound endpoint.
- NSG flow logs ہر allow/deny decision ریکارڈ کرتے ہیں؛ blocked traffic ڈھونڈنے کے لیے انہیں Traffic Analytics میں analyze کریں۔NSG flow logs har allow/deny decision record karte hain; blocked traffic dhoondne ke liye unhe Traffic Analytics mein analyze karein.NSG flow logs record every allow/deny decision; analyze them in Traffic Analytics to find blocked traffic.
- Connection troubleshoot ہر hop (NSG، routes، gateway) چیک کرتا ہے اور بالکل بتاتا ہے کہ connectivity کہاں ٹوٹ رہی ہے۔Connection troubleshoot har hop (NSG, routes, gateway) check karta hai aur exactly batata hai ke connectivity kahan toot rahi hai.Connection troubleshoot walks each hop (NSG, routes, gateway) and pinpoints exactly where connectivity breaks.
خود جانچ (مشق)Self-Check (Practice)Self-Check (Practice)
یہ مشقی سوالات ہیں، امتحانی سوالات نہیں۔These are practice questions, not exam questions.These are practice questions, not exam questions.
❓ Private Endpoint کیا ہے؟Private Endpoint kya hai?What is a Private Endpoint?
Azure PaaS resource کے لیے آپ کے VNet کے اندر private IP interface، تاکہ اس کا ٹریفک کبھی عوامی انٹرنیٹ cross نہ کرے۔Azure PaaS resource ke liye aap ke VNet ke andar private IP interface, taake us ka traffic kabhi public internet cross na kare.A private IP interface inside your VNet for an Azure PaaS resource, so its traffic never crosses the public internet.
❓ Private DNS zone کیا کرتی ہے؟Private DNS zone kya karti hai?What does a Private DNS zone do?
یہ PaaS FQDN کو VNet کے اندر Private Endpoint کے private IP سے resolve کرتی ہے۔ Zone کا نام privatelink.<service> pattern پر ہوتا ہے۔Yeh PaaS FQDN ko VNet ke andar Private Endpoint ke private IP se resolve karti hai. Zone ka naam privatelink.<service> pattern par hota hai.It resolves the PaaS FQDN to the private IP of the Private Endpoint inside the VNet. The zone name follows privatelink.<service>.
❓ Azure networking کو monitor اور troubleshoot کرنے کے لیے کون سے tools استعمال کرتے ہیں؟Azure networking ko monitor aur troubleshoot karne ke liye kaunse tools use karte hain?Which tools do you use to monitor and troubleshoot Azure networking?
Network Watcher (ہر region میں enable ہونا چاہیے) ٹریفک ہسٹری کے لیے NSG flow logs کے ساتھ، plus Connection troubleshoot اور Packet capture۔Network Watcher (har region mein enable hona chahiye) traffic history ke liye NSG flow logs ke saath, plus Connection troubleshoot aur Packet capture.Network Watcher (must be enabled per region) with NSG flow logs for traffic history, plus Connection troubleshoot and Packet capture.