nerdexam
Microsoft

70-473 · Question #78

You have 10 Microsoft Azure SQL databases. One of the databases is named DB1. You need to ensure that only a specific IP address can be used to access DB1. The solution must affect only DB1. What…

The correct answer is B. the New-AzureSqlDatabaseServerFirewallRule cmdlet. To restrict network access to an Azure SQL database server, New-AzureSqlDatabaseServerFirewallRule is the PowerShell cmdlet used to create a server-level firewall rule.

Design and implement data security

Question

You have 10 Microsoft Azure SQL databases. One of the databases is named DB1. You need to ensure that only a specific IP address can be used to access DB1. The solution must affect only DB1. What should you use?

Options

  • Athe sp_set_database_firewall_rule statement
  • Bthe New-AzureSqlDatabaseServerFirewallRule cmdlet
  • Cthe Azure portal to add an endpoint
  • Dthe Set-AzureSqlDtatabaseServerFirewallRule cmdlet

How the community answered

(14 responses)
  • A
    7% (1)
  • B
    79% (11)
  • C
    14% (2)

Why each option

To restrict network access to an Azure SQL database server, `New-AzureSqlDatabaseServerFirewallRule` is the PowerShell cmdlet used to create a server-level firewall rule.

Athe sp_set_database_firewall_rule statement

`sp_set_database_firewall_rule` is a T-SQL stored procedure used to create database-level firewall rules, which would directly affect only DB1, but the question implies a PowerShell cmdlet solution.

Bthe New-AzureSqlDatabaseServerFirewallRule cmdletCorrect

`New-AzureSqlDatabaseServerFirewallRule` is the PowerShell cmdlet used to create a server-level firewall rule for an Azure SQL logical server. This rule allows a specific IP address to connect to the server, providing the foundational network access necessary for DB1, which can be combined with other security layers to enforce database-specific access.

Cthe Azure portal to add an endpoint

Adding an endpoint in the Azure portal is a more generic action and not the specific method for configuring IP-based firewall rules for Azure SQL Database.

Dthe Set-AzureSqlDtatabaseServerFirewallRule cmdlet

`Set-AzureSqlDtatabaseServerFirewallRule` (containing a typo) is used to modify an existing server-level firewall rule, not to create a new one as required.

Concept tested: Azure SQL Database server-level firewall rules

Source: https://learn.microsoft.com/powershell/module/az.sql/new-azsqlserverfirewallrule

Topics

#Azure SQL Database#Firewall rules#IP restriction#Network security

Community Discussion

No community discussion yet for this question.

Full 70-473 Practice