Practice private endpoint DNS cases involving private zones, hub-spoke resolution, public access, approval states, and routing checks.