nerdexam
Microsoft

70-473 · Question #79

Your company has a Microsoft Azure MySQL database that is used by an Azure Web App. The logical server that hosts the database contains other databases. You move the database to another Azure…

The correct answer is C. Create a server-level firewall rule. After moving an Azure MySQL database to a new tenant, a server-level firewall rule must be created on the new database server to allow the Azure Web App's outbound IP addresses to establish a connection.

Design and implement data security

Question

Your company has a Microsoft Azure MySQL database that is used by an Azure Web App. The logical server that hosts the database contains other databases. You move the database to another Azure tenant. You need to ensure that the Web App can access the database. What should you do?

Options

  • AModify the SSL settings for the database server.
  • BAdd an Azure virtual network gateway.
  • CCreate a server-level firewall rule.
  • DCreate a database-level firewall rule.

How the community answered

(32 responses)
  • A
    9% (3)
  • B
    3% (1)
  • C
    72% (23)
  • D
    16% (5)

Why each option

After moving an Azure MySQL database to a new tenant, a server-level firewall rule must be created on the new database server to allow the Azure Web App's outbound IP addresses to establish a connection.

AModify the SSL settings for the database server.

Modifying SSL settings ensures secure communication but does not control network access based on IP addresses, which is essential for re-establishing connectivity.

BAdd an Azure virtual network gateway.

An Azure virtual network gateway is used for connecting virtual networks or on-premises networks and is not the direct mechanism for enabling an Azure Web App to access an Azure MySQL database over its public endpoint.

CCreate a server-level firewall rule.Correct

Azure Database for MySQL uses server-level firewall rules to control network access. When the database is moved to a new tenant, the new MySQL server's firewall must be configured to allow the outbound IP addresses of the Azure Web App to establish a connection.

DCreate a database-level firewall rule.

Azure Database for MySQL does not support database-level firewall rules; all firewall rules are configured at the server level.

Concept tested: Azure MySQL firewall configuration for Web App connectivity

Source: https://learn.microsoft.com/azure/mysql/single-server/concepts-firewall-rules

Topics

#Azure Database for MySQL#Firewall rules#Azure Web App#Network security

Community Discussion

No community discussion yet for this question.

Full 70-473 Practice