A security team requires that Event Grid only delivers events to endpoints within a virtual network. Which Event Grid feature enables this?

1. A IP firewall rules
2. ✓ B Private endpoints on Event Grid namespaces (Standard tier) (correct answer)
3. C NSG on the subscriber endpoint
4. D Azure Firewall policy

Shortcut: Event Grid namespaces (Standard tier) support private endpoints, restricting event delivery to VNet-connected endpoints. Custom topics support outbound-to-VNet delivery via private endpoint on the subscriber.