DP-300 · Question #339
Case Study 5 - ADatum Corporation Overview ADatum Corporation is a financial services company that has a main office in New York City. Existing Environment Licensing Agreement ADatum has a Microsoft…
The correct answer is D. Configure virtual network service endpoints. Explanation Configuring virtual network service endpoints (Option D) must be performed twice - once for the primary replica and once for the secondary replica in the auto-failover group - because each replica resides on a different logical server, and each logical server's…
Question
Options
- AEnable database firewall rules.
- BCreate database-scoped credentials.
- CConfigure connection strings that reference the read-write listener.
- DConfigure virtual network service endpoints.
How the community answered
(19 responses)- A5% (1)
- B11% (2)
- C5% (1)
- D79% (15)
Explanation
Explanation
Configuring virtual network service endpoints (Option D) must be performed twice - once for the primary replica and once for the secondary replica in the auto-failover group - because each replica resides on a different logical server, and each logical server's firewall must be independently configured to allow access from the virtual network. This satisfies the availability requirement that DB3 remains accessible following a planned failover, since the secondary becomes the new primary and must already have network access configured.
Option A (Database firewall rules) is incorrect because IP-based firewall rules don't scale well for the described scenario and don't address the virtual network connectivity needed between Azure services in this architecture - virtual network service endpoints are the appropriate network-level control here.
Option B (Database-scoped credentials) is incorrect because these relate to authentication for elastic jobs, not network connectivity or access configuration for failover group replicas.
Option C (Read-write listener connection strings) is incorrect because while auto-failover groups do provide a read-write listener, configuring connection strings is a client-side concern and doesn't need to be done to each replica - the listener automatically redirects traffic.
Memory Tip
Think "two servers = two endpoints" - in an auto-failover group, you have two logical servers (primary + secondary), so any server-level network configuration like virtual network service endpoints must be applied twice, once per server.
Topics
Community Discussion
No community discussion yet for this question.