PE doc updates

Author: AbhishekMallick01

articles/backup/backup-azure-private-endpoints-concept.md

@@ -145,6 +145,13 @@ In addition to the Azure Backup cloud services, the workload extension and agent
 
 As a pre-requisite, Recovery Services vault requires permissions for creating additional private endpoints in the same Resource Group. We also recommend providing the Recovery Services vault the permissions to create DNS entries in the private DNS zones (`privatelink.blob.core.windows.net`, `privatelink.queue.core.windows.net`). Recovery Services vault searches for private DNS zones in the resource groups where VNet and private endpoint are created. If it has the permissions to add DNS entries in these zones, they’ll be created by the vault; otherwise, you must create them manually.
 
+>[!Note]
+>Integration with private DNS zone present in different subscriptions is unsupported in this experience.
+
+The following diagram shows how the name resolution works for storage accounts using a private DNS zone.
+
+:::image type="content" source="./media/private-endpoints-overview/name-resolution-works-for-storage-accounts-using-private-dns-zone-inline.png" alt-text="Diagram showing how the name resolution works for storage accounts using a private DNS zone." lightbox="./media/private-endpoints-overview/name-resolution-works-for-storage-accounts-using-private-dns-zone-expanded.png":::
+
 ## Next steps
 
 - Learn [how to configure and manage private endpoints for Azure Backup](backup-azure-private-endpoints-configure-manage.md).