Microsoft DP-300 Exam - Topic 12 Question 5 Discussion

Actual exam question for Microsoft's DP-300 exam

Question #: 5
Topic #: 12

[All DP-300 Questions]

You have an Azure virtual machine named VM1 on a virtual network named VNet1. Outbound traffic from VM1

to the internet is blocked.

You have an Azure SQL database named SqlDb1 on a logical server named SqlSrv1.

You need to implement connectivity between VM1 and SqlDb1 to meet the following requirements:

Ensure that VM1 cannot connect to any Azure SQL Server other than SqlSrv1.

Restrict network connectivity to SqlSrv1.

What should you create on VNet1?

Aa VPN gateway

Ba service endpoint

Ca private link

Dan ExpressRoute gateway

Show Suggested Answer

Suggested Answer: C

Azure Private Link enables you to access Azure PaaS Services (for example, Azure Storage and SQL Database) and Azure hosted customer-owned/partner services over a private endpoint in your virtual network.

Traffic between your virtual network and the service travels the Microsoft backbone network. Exposing your service to the public internet is no longer necessary.

https://docs.microsoft.com/en-us/azure/private-link/private-link-overview

by Tonette at May 06, 2022, 09:46 PM

Limited Time Offer

25%

Off

Get Premium DP-300 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Clorinda

10 months ago

ExpressRoute sounds like overkill for just connecting to one SQL server.

upvoted 0 times

...

Blondell

10 months ago

Wait, can VM1 really only connect to SqlSrv1 with a private link?

upvoted 0 times

...

Veta

11 months ago

A VPN gateway seems unnecessary for this scenario.

upvoted 0 times

...

Diane

11 months ago

Definitely agree, private links are great for security!

upvoted 0 times

...

Werner

11 months ago

I think a private link is the way to go here.

upvoted 0 times

...

Milly

11 months ago

I’m leaning towards the service endpoint option, but I’m a bit confused about how it compares to private links in terms of security and restrictions.

upvoted 0 times

...

Beckie

11 months ago

I practiced a similar question about connecting VMs to Azure SQL databases, and I feel like a VPN gateway might be overkill for this scenario.

upvoted 0 times

...

Leonor

11 months ago

I think a private link might be the right choice since it provides a secure connection to SqlSrv1, but I need to double-check if it meets the requirement of restricting access to only that server.

upvoted 0 times

...

Winfred

11 months ago

I remember studying about service endpoints and how they can restrict access to specific Azure services, but I'm not entirely sure if that's the best option here.

upvoted 0 times

...

Carli

11 months ago

I'm a bit unsure about this one. I know the lognormal, exponential, and Weibull distributions are all defined on the positive real line, but I'm not entirely sure if there are any other distributions that have the full real number line as the domain. I'll need to review my notes to be more confident in my answer.

upvoted 0 times

...

Jaime

11 months ago

Hmm, I'm a bit confused about the FTP server location - do I need to include the "/" at the end or not?

upvoted 0 times

...

Mel

11 months ago

Okay, I think the key here is making sure the forecast is properly configured to account for the new stage. I'll focus on evaluating the options that directly address that issue.

upvoted 0 times

...

Elroy

11 months ago

Hmm, I'm a bit unsure about this one. Shoulder surfing is an in-person attack, so I'm not sure if it's related to availability or integrity. I'll have to carefully consider the options and think about which security principle is most relevant.

upvoted 0 times

...

Lura

11 months ago

Okay, let's think this through. The question is asking about a practice that supports end-to-end service reporting, so I'm going to go with Option B and say that creating a reporting framework is the best approach.

upvoted 0 times

...

Amber

11 months ago

Okay, I think I've got this. The examples are describing design-time metadata about a service, not runtime data or coordination. So I'm going to go with option A.

upvoted 0 times

...