nerdexam
Microsoft

DP-300 · Question #401

SIMULATION You need to ensure that you can connect to db1 by using a private IP address on a virtual network named VNET1. You may need to use SQL Server Management Studio and the Azure portal…

Configuring a Private Endpoint is the correct approach because it assigns a private IP address from VNET1's address space to the Azure SQL Database (db1), enabling secure connectivity entirely within the virtual network without traffic traversing the public internet. The…

Submitted by javi_es· Mar 6, 2026Implement and manage virtual networking - Configure private access to Azure services using Private Endpoints (Microsoft Azure Administrator AZ-104 / Azure Database Administrator DP-300)

Question

SIMULATION You need to ensure that you can connect to db1 by using a private IP address on a virtual network named VNET1. You may need to use SQL Server Management Studio and the Azure portal. Answer: To connect to an Azure SQL Database using a private IP address on a virtual network via the Azure portal, you'll need to configure a Private Endpoint. Connect to an Azure SQL server using an Azure Private Endpoint using the Azure portal Create a Private Endpoint: Step 1: In the Azure portal, search for and select "Private endpoints". Step 2: Select "+ Create" to create a new Private Endpoint. Step 3: On the "Basics" tab, provide a name, resource group, and region. Step 4: On the "Resource" tab, select "Microsoft.Sql/servers" as the resource type and choose your SQL Server. [Select db1] Step 5: On the "Virtual Network" tab, select your virtual. [Select VNET1] Step 6: On the "DNS" tab, review the DNS settings and make any necessary changes. [Skip] Reference: https://learn.microsoft.com/en-us/azure/private-link/tutorial-private-endpoint-sql-portal

Explanation

Configuring a Private Endpoint is the correct approach because it assigns a private IP address from VNET1's address space to the Azure SQL Database (db1), enabling secure connectivity entirely within the virtual network without traffic traversing the public internet. The Private Endpoint creates a network interface in the specified virtual network that maps to the SQL Server resource, satisfying the requirement of connecting via a private IP on VNET1. This is the Azure-recommended method for private, secure access to PaaS services like Azure SQL Database from within a virtual network.

Topics

#Azure Private Endpoint#Azure SQL Database#Virtual Network Connectivity#Azure Networking

Community Discussion

No community discussion yet for this question.

Full DP-300 Practice