Discuss Microsoft DP-300 Exam Topic 12 Question 22

You have an Azure virtual machine named VM1 on a virtual network named VNet1. Outbound traffic from VM1 to the internet is blocked.

You have an Azure SQL database named SqlDb1 on a logical server named SqlSrv1.

You need to implement connectivity between VM1 and SqlDb1 to meet the following requirements:

Ensure that all traffic to the public endpoint of SqlSrv1 is blocked.

Minimize the possibility of VM1 exfiltrating data stored in SqlDb1.

D18912E1457D5D1DDCBD40AB3BF70D5D

What should you create on VNet1?

Aa VPN gateway

Ba service endpoint

Ca private link

Dan ExpressRoute gateway

Suggested Answer: C

Azure Private Link enables you to access Azure PaaS Services (for example, Azure Storage and SQL Database) and Azure hosted customer-owned/partner services over a private endpoint in your virtual network.

Traffic between your virtual network and the service travels the Microsoft backbone network. Exposing your service to the public internet is no longer necessary.

https://docs.microsoft.com/en-us/azure/private-link/private-link-overview

Get Premium DP-300 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

11 comments · newest first

Tawanna 12 months ago

ExpressRoute seems like overkill for this scenario.

Izetta 1 year ago

A service endpoint could work too, but not as secure.

Albina 1 year ago

Wait, can a VPN gateway even block public access?

Nidia 1 year ago

Totally agree, private links are secure!

Kathrine 1 year ago

I think a private link is the best option here.

Marge 1 year ago

I'm a bit confused; I thought ExpressRoute was mainly for on-premises connections, so I don't think that's what we need here.

Myong 1 year ago

I practiced a similar question about connecting VMs to databases, and I feel like a VPN gateway could be overkill for this scenario.

Bernardine 1 year ago

I think a private link might be the right choice since it allows private connectivity and keeps the public endpoint blocked.

Yaeko 1 year ago

I remember studying about service endpoints and how they can secure traffic to Azure services, but I'm not sure if that's the best option here.

Martin 1 year ago

Hmm, I'm a bit confused. Is this asking about a specific Salesforce feature or just general data modeling principles?

Cheryll 1 year ago

The key here is to focus on the specific ways incumbents contribute to the job analysis process. I think option C about providing important validation is the most comprehensive answer.

Microsoft DP-300 Exam - Topic 12 Question 22 Discussion