70-473 · Question #78
You have 10 Microsoft Azure SQL databases. One of the databases is named DB1. You need to ensure that only a specific IP address can be used to access DB1. The solution must affect only DB1. What…
The correct answer is B. the New-AzureSqlDatabaseServerFirewallRule cmdlet. To restrict network access to an Azure SQL database server, New-AzureSqlDatabaseServerFirewallRule is the PowerShell cmdlet used to create a server-level firewall rule.
Question
Options
- Athe sp_set_database_firewall_rule statement
- Bthe New-AzureSqlDatabaseServerFirewallRule cmdlet
- Cthe Azure portal to add an endpoint
- Dthe Set-AzureSqlDtatabaseServerFirewallRule cmdlet
How the community answered
(14 responses)- A7% (1)
- B79% (11)
- C14% (2)
Why each option
To restrict network access to an Azure SQL database server, `New-AzureSqlDatabaseServerFirewallRule` is the PowerShell cmdlet used to create a server-level firewall rule.
`sp_set_database_firewall_rule` is a T-SQL stored procedure used to create database-level firewall rules, which would directly affect only DB1, but the question implies a PowerShell cmdlet solution.
`New-AzureSqlDatabaseServerFirewallRule` is the PowerShell cmdlet used to create a server-level firewall rule for an Azure SQL logical server. This rule allows a specific IP address to connect to the server, providing the foundational network access necessary for DB1, which can be combined with other security layers to enforce database-specific access.
Adding an endpoint in the Azure portal is a more generic action and not the specific method for configuring IP-based firewall rules for Azure SQL Database.
`Set-AzureSqlDtatabaseServerFirewallRule` (containing a typo) is used to modify an existing server-level firewall rule, not to create a new one as required.
Concept tested: Azure SQL Database server-level firewall rules
Source: https://learn.microsoft.com/powershell/module/az.sql/new-azsqlserverfirewallrule
Topics
Community Discussion
No community discussion yet for this question.