A security-critical Event Hubs namespace must not be accessible from the public internet. Which features achieve network isolation?
- A IP firewall rules only
- B Private endpoints and disabling public network access (Standard/Premium) (correct answer)
- C NSG on the client side
- D Azure Front Door WAF
Shortcut: Private endpoints create a private IP for the Event Hubs namespace in the VNet. Combining with --public-network-access Disabled blocks all public internet access to the namespace.