70-473 · Question #79
Your company has a Microsoft Azure MySQL database that is used by an Azure Web App. The logical server that hosts the database contains other databases. You move the database to another Azure…
The correct answer is C. Create a server-level firewall rule. After moving an Azure MySQL database to a new tenant, a server-level firewall rule must be created on the new database server to allow the Azure Web App's outbound IP addresses to establish a connection.
Question
Options
- AModify the SSL settings for the database server.
- BAdd an Azure virtual network gateway.
- CCreate a server-level firewall rule.
- DCreate a database-level firewall rule.
How the community answered
(32 responses)- A9% (3)
- B3% (1)
- C72% (23)
- D16% (5)
Why each option
After moving an Azure MySQL database to a new tenant, a server-level firewall rule must be created on the new database server to allow the Azure Web App's outbound IP addresses to establish a connection.
Modifying SSL settings ensures secure communication but does not control network access based on IP addresses, which is essential for re-establishing connectivity.
An Azure virtual network gateway is used for connecting virtual networks or on-premises networks and is not the direct mechanism for enabling an Azure Web App to access an Azure MySQL database over its public endpoint.
Azure Database for MySQL uses server-level firewall rules to control network access. When the database is moved to a new tenant, the new MySQL server's firewall must be configured to allow the outbound IP addresses of the Azure Web App to establish a connection.
Azure Database for MySQL does not support database-level firewall rules; all firewall rules are configured at the server level.
Concept tested: Azure MySQL firewall configuration for Web App connectivity
Source: https://learn.microsoft.com/azure/mysql/single-server/concepts-firewall-rules
Topics
Community Discussion
No community discussion yet for this question.