Microsoft DP-300 Exam - Topic 12 Question 22 Discussion

Actual exam question for Microsoft's DP-300 exam

Question #: 22
Topic #: 12

You have an Azure virtual machine named VM1 on a virtual network named VNet1. Outbound traffic from VM1 to the internet is blocked.

You have an Azure SQL database named SqlDb1 on a logical server named SqlSrv1.

You need to implement connectivity between VM1 and SqlDb1 to meet the following requirements:

Ensure that all traffic to the public endpoint of SqlSrv1 is blocked.

Minimize the possibility of VM1 exfiltrating data stored in SqlDb1.

D18912E1457D5D1DDCBD40AB3BF70D5D

What should you create on VNet1?

Aa VPN gateway

Ba service endpoint

Ca private link

Dan ExpressRoute gateway

Show Suggested Answer

Suggested Answer: C

Azure Private Link enables you to access Azure PaaS Services (for example, Azure Storage and SQL Database) and Azure hosted customer-owned/partner services over a private endpoint in your virtual network.

Traffic between your virtual network and the service travels the Microsoft backbone network. Exposing your service to the public internet is no longer necessary.

https://docs.microsoft.com/en-us/azure/private-link/private-link-overview

by Lenna at May 09, 2022, 09:52 AM

Limited Time Offer

25%

Off

Get Premium DP-300 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tawanna

4 months ago

ExpressRoute seems like overkill for this scenario.

upvoted 0 times

...

Izetta

4 months ago

A service endpoint could work too, but not as secure.

upvoted 0 times

...

Albina

4 months ago

Wait, can a VPN gateway even block public access?

upvoted 0 times

...

Nidia

5 months ago

Totally agree, private links are secure!

upvoted 0 times

...

Kathrine

5 months ago

I think a private link is the best option here.

upvoted 0 times

...

Marge

5 months ago

I'm a bit confused; I thought ExpressRoute was mainly for on-premises connections, so I don't think that's what we need here.

upvoted 0 times

...

Myong

5 months ago

I practiced a similar question about connecting VMs to databases, and I feel like a VPN gateway could be overkill for this scenario.

upvoted 0 times

...

Bernardine

5 months ago

I think a private link might be the right choice since it allows private connectivity and keeps the public endpoint blocked.

upvoted 0 times

...

Yaeko

5 months ago

I remember studying about service endpoints and how they can secure traffic to Azure services, but I'm not sure if that's the best option here.

upvoted 0 times

...

Martin

5 months ago

Hmm, I'm a bit confused. Is this asking about a specific Salesforce feature or just general data modeling principles?

upvoted 0 times

...

Cheryll

5 months ago

The key here is to focus on the specific ways incumbents contribute to the job analysis process. I think option C about providing important validation is the most comprehensive answer.

upvoted 0 times

...