Discuss Microsoft DP-300 Exam Topic 12 Question 5

You have an Azure virtual machine named VM1 on a virtual network named VNet1. Outbound traffic from VM1

to the internet is blocked.

You have an Azure SQL database named SqlDb1 on a logical server named SqlSrv1.

You need to implement connectivity between VM1 and SqlDb1 to meet the following requirements:

Ensure that VM1 cannot connect to any Azure SQL Server other than SqlSrv1.

Restrict network connectivity to SqlSrv1.

What should you create on VNet1?

Aa VPN gateway

Ba service endpoint

Ca private link

Dan ExpressRoute gateway

Suggested Answer: C

Azure Private Link enables you to access Azure PaaS Services (for example, Azure Storage and SQL Database) and Azure hosted customer-owned/partner services over a private endpoint in your virtual network.

Traffic between your virtual network and the service travels the Microsoft backbone network. Exposing your service to the public internet is no longer necessary.

https://docs.microsoft.com/en-us/azure/private-link/private-link-overview

Get Premium DP-300 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

15 comments · newest first

Clorinda 12 months ago

ExpressRoute sounds like overkill for just connecting to one SQL server.

Blondell 1 year ago

Wait, can VM1 really only connect to SqlSrv1 with a private link?

Veta 1 year ago

A VPN gateway seems unnecessary for this scenario.

Diane 1 year ago

Definitely agree, private links are great for security!

Werner 1 year ago

I think a private link is the way to go here.

Milly 1 year ago

I’m leaning towards the service endpoint option, but I’m a bit confused about how it compares to private links in terms of security and restrictions.

Beckie 1 year ago

I practiced a similar question about connecting VMs to Azure SQL databases, and I feel like a VPN gateway might be overkill for this scenario.

Leonor 1 year ago

I think a private link might be the right choice since it provides a secure connection to SqlSrv1, but I need to double-check if it meets the requirement of restricting access to only that server.

Winfred 1 year ago

I remember studying about service endpoints and how they can restrict access to specific Azure services, but I'm not entirely sure if that's the best option here.

Carli 1 year ago

I'm a bit unsure about this one. I know the lognormal, exponential, and Weibull distributions are all defined on the positive real line, but I'm not entirely sure if there are any other distributions that have the full real number line as the domain. I'll need to review my notes to be more confident in my answer.

Jaime 1 year ago

Hmm, I'm a bit confused about the FTP server location - do I need to include the "/" at the end or not?

Mel 1 year ago

Okay, I think the key here is making sure the forecast is properly configured to account for the new stage. I'll focus on evaluating the options that directly address that issue.

Elroy 1 year ago

Hmm, I'm a bit unsure about this one. Shoulder surfing is an in-person attack, so I'm not sure if it's related to availability or integrity. I'll have to carefully consider the options and think about which security principle is most relevant.

Lura 1 year ago

Okay, let's think this through. The question is asking about a practice that supports end-to-end service reporting, so I'm going to go with Option B and say that creating a reporting framework is the best approach.

Amber 1 year ago

Okay, I think I've got this. The examples are describing design-time metadata about a service, not runtime data or coordination. So I'm going to go with option A.

Microsoft DP-300 Exam - Topic 12 Question 5 Discussion