Microsoft 70-473 Exam

From Scenario: Security requirements

Relecloud identifies the following requirements:

Customers must be able to read data only. (db_datareader)

Customers must be able to create custom views. (db_ddladmin)

Customers must be able to use two-factor authentication when accessing Azure SQL databases.

Scenario: Technical requirements

Relecloud identifies the following technical requirements:

If ServerDB0 and ServerDB2 fail, AzDB01 must be able to respond to customer requests for data.

The Always On availability groups feature is a high-availability and disaster-recovery solution that provides an enterprise-level alternative to database mirroring. Introduced in SQL Server 2012 (11.x), Always On availability groups maximizes the availability of a set of user databases for an enterprise. An availability group supports a failover environment for a discrete set of user databases, known as availability databases, that fail over together. An availability group supports a set of read-write primary databases and one to eight sets of corresponding secondary databases.

Scenario: Planned changes

Relecloud plans to move all of its customers to a delivery model that uses Azure SQL Database and plans to maintain a single database for each customer.

Relecloud plans to automate the process of creating the required infrastructure for each new customer, including the process of loading data to the customer databases.

Relecloud plans to onboard 30 new customer accounts during the next year. The data for the new customers is approximately 10 GB and has a static size. The new customers require a rapid response time to database queries and each customer has five to 10 concurrent logins.

Incorrect Answers:

B: A premium database pool would be more costly.

The New-AzureRmSqlServerFirewallRule cmdlet creates a firewall rule for the specified Azure SQL Database server.

Database-level firewall rules enable clients to access certain (secure) databases within the same logical server. You can create these rules for each database (including the master database) and they are stored in the individual databases.

https://docs.microsoft.com/en-us/powershell/module/azurerm.sql/new-azurermsqlserverfirewallrule?view=azurermps-6.7.0

https://docs.microsoft.com/en-us/azure/sql-database/sql-database-firewall-configure

Application Gateway operates as an application delivery controller and offers SSL termination, cookie-based session affinity, round-robin load distribution, content-based routing, ability to host multiple websites and security enhancements.

Scenario: Networking requirements

All Internet traffic initiated from the servers in Azure must be routed through the local network firewalls and content filters.

Incorrect Answers:

B: If you need basic network level access control (based on IP address and the TCP or UDP protocols), you can use Network Security Groups (NSGs). An NSG is a basic, stateful, packet filtering firewall, and it enables you to control access based on a 5-tuple.