nerdexam
Microsoft

SC-100 · Question #150

You are an Azure solution architect; your organization has an on-premises Microsoft SQL server. You recently deployed an Azure App Service with a web app; the web app is required to securely connect…

The correct answer is B. Hybrid connections. Azure Relay Hybrid Connections allows an Azure App Service to reach an on-premises SQL Server over an outbound HTTPS/WebSocket connection - no VPN, ExpressRoute, or firewall inbound rules required. This makes it ideal for testing before ExpressRoute exists. VNet integration (C)…

Design security solutions for applications and data

Question

You are an Azure solution architect; your organization has an on-premises Microsoft SQL server. You recently deployed an Azure App Service with a web app; the web app is required to securely connect to the Microsoft SQL Server in your on-premises environment. The intention is to establish an ExpressRoute to connect to Azure in the future, but as it stands today, there is no direct connection to Azure. The development team is inquiring if there is a secure way to connect the Microsoft SQL Server to the Azure App Service for testing purposes without needing the ExpressRoute connection. What would be the recommended solution

Options

  • AVirtual network NAT gateway integration
  • BHybrid connections
  • CVirtual network integration
  • DA private endpoint

How the community answered

(62 responses)
  • A
    3% (2)
  • B
    79% (49)
  • C
    11% (7)
  • D
    6% (4)

Explanation

Azure Relay Hybrid Connections allows an Azure App Service to reach an on-premises SQL Server over an outbound HTTPS/WebSocket connection - no VPN, ExpressRoute, or firewall inbound rules required. This makes it ideal for testing before ExpressRoute exists. VNet integration (C) gives the App Service access to a VNet, but without ExpressRoute or VPN, that VNet has no path to on-premises. A private endpoint (D) exposes an Azure service inside a VNet - it does not bridge to on-premises. A VNet NAT gateway (A) handles outbound internet egress, not private on-premises connectivity.

Topics

#Azure App Service#Hybrid Connections#On-premises integration#Secure data access

Community Discussion

No community discussion yet for this question.

Full SC-100 Practice