nerdexam
Microsoft

DP-300 · Question #37

You have an Azure virtual machine named VM1 on a virtual network named VNet1. Outbound traffic from VM1 to the internet is blocked. You have an Azure SQL database named SqlDb1 on a logical server…

The correct answer is C. a private link. Azure Private Link enables you to access Azure PaaS Services (for example, Azure Storage and SQL Database) and Azure hosted customer-owned/partner services over a private endpoint in your virtual network. Traffic between your virtual network and the service travels the…

Submitted by thandi_sa· Mar 6, 2026Implement a secure environment

Question

You have an Azure virtual machine named VM1 on a virtual network named VNet1. Outbound traffic from VM1 to the internet is blocked. You have an Azure SQL database named SqlDb1 on a logical server named SqlSrv1. You need to implement connectivity between VM1 and SqlDb1 to meet the following requirements: - Ensure that all traffic to the public endpoint of SqlSrv1 is blocked. - Minimize the possibility of VM1 exfiltrating data stored in SqlDb1. What should you create on VNet1?

Options

  • Aa VPN gateway
  • Ba service endpoint
  • Ca private link
  • Dan ExpressRoute gateway

How the community answered

(51 responses)
  • A
    27% (14)
  • B
    16% (8)
  • C
    51% (26)
  • D
    6% (3)

Explanation

Azure Private Link enables you to access Azure PaaS Services (for example, Azure Storage and SQL Database) and Azure hosted customer-owned/partner services over a private endpoint in your virtual network. Traffic between your virtual network and the service travels the Microsoft backbone network. Exposing your service to the public internet is no longer necessary. https://docs.microsoft.com/en-us/azure/private-link/private-link-overview

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full DP-300 Practice