Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft AZ-500 Exam - Topic 3 Question 97 Discussion

Actual exam question for Microsoft's AZ-500 exam
Question #: 97
Topic #: 3
[All AZ-500 Questions]

You have an Azure subscription that contains an Azure SQL Database logic server named SQL! and an Azure virtual machine named VM1. VM1 uses a private IP address only.

The Firewall and virtual networks settings for SQL1 are shown in the following exhibit.

You need to ensure that VM1 can connect to SQL1. The solution must use the principle of least privilege. What should you do?

Show Suggested Answer Hide Answer
Suggested Answer: C

by Samira at Nov 22, 2025, 09:10 PM

Limited Time Offer

25%

Off

Get Premium AZ-500 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Lawrence
2 days ago
It allows specific access for VM1.
upvoted 0 times
...
Evan
7 days ago
Why C? Isn't it too broad?
upvoted 0 times
...
Lawrence
25 days ago
I think option C is the best choice.
upvoted 0 times
...
Jesusita
1 month ago
Totally agree with Dexter, that’s the most secure choice!
upvoted 0 times
...
Marilynn
1 month ago
Wait, can VM1 really connect to SQL1 without a public IP?
upvoted 0 times
...
Remona
1 month ago
C) Creating a new firewall rule seems like the best option here.
upvoted 0 times
...
Dexter
2 months ago
A) Add an existing virtual network is the way to go!
upvoted 0 times
...
Aileen
2 months ago
I'm just glad they didn't ask us to set up a VPN. That would have been a real headache!
upvoted 0 times
...
Emmett
2 months ago
Option D seems tempting, but that's like giving everyone the keys to the castle. Not very secure, if you ask me.
upvoted 0 times
...
Carlee
2 months ago
Haha, I bet the exam writer was like, "Let's see if they can figure out the 'SQL!' server name. Tricky, tricky!"
upvoted 0 times
...
Cathern
2 months ago
I think allowing Azure services to access the server could be too broad. We should focus on specific access, but I can't recall if creating a new firewall rule is the best way to do that.
upvoted 0 times
...
Kimi
2 months ago
I’m a bit confused about whether setting the connection policy to Proxy would actually help in this scenario. It seems like it might not be the best choice.
upvoted 0 times
...
Renato
3 months ago
This question feels similar to one we practiced where we had to configure access for a VM to a database. I think adding a firewall rule might be the right approach.
upvoted 0 times
...
Hassie
3 months ago
Yeah, I agree with Emily. Creating a new firewall rule looks like the way to go here. We just need to make sure we set it up correctly to allow the connection from VM1's private IP address.
upvoted 0 times
...
Carman
3 months ago
I'm leaning towards option C - creating a new firewall rule. That seems like the most straightforward way to grant VM1 access to the SQL1 server while following the principle of least privilege.
upvoted 0 times
...
Brittni
3 months ago
I'm a bit confused by the options here. Adding an existing virtual network doesn't seem relevant, and setting the Connection Policy to Proxy might not be the most direct solution.
upvoted 0 times
...
Lillian
3 months ago
The correct answer is C. Creating a new firewall rule is the way to go, as it follows the principle of least privilege.
upvoted 0 times
...
Tora
4 months ago
I think D) is a bit too broad, not really least privilege.
upvoted 0 times
...
Cherelle
4 months ago
I remember we discussed the importance of least privilege in our last study session, but I'm not entirely sure which option aligns best with that principle here.
upvoted 0 times
...
Idella
4 months ago
Okay, let's see. The question mentions that VM1 uses a private IP address only, so I'm thinking we'll need to create a new firewall rule to allow that connection.
upvoted 0 times
...
Ena
4 months ago
Hmm, this looks like a tricky one. I'll need to carefully review the firewall and network settings to determine the best approach.
upvoted 0 times
...

Save Cancel