nerdexam
Microsoft

SC-100 · Question #239

You have an Azure subscription that contains SQL Server on Azure virtual machines located in the West US Azure region. The virtual machines are only accessible by using private IP addresses. You…

The correct answer is C. a service endpoint. Virtual Network (VNet) service endpoint provides secure and direct connectivity to Azure services over an optimized route over the Azure backbone network. Endpoints allow you to secure your critical Azure service resources to only your virtual networks. Service Endpoints…

Design security solutions for applications and data

Question

You have an Azure subscription that contains SQL Server on Azure virtual machines located in the West US Azure region. The virtual machines are only accessible by using private IP addresses. You plan to deploy a Windows-based Azure App Service web apps in the East US Azure region. You need to recommend a solution to provide the web apps access to the SQL Server databases. What should you include in the recommendation?

Options

  • Aan Azure VPN gateway
  • Ba private endpoint
  • Ca service endpoint
  • Dan Azure Bastion host

How the community answered

(23 responses)
  • A
    13% (3)
  • B
    4% (1)
  • C
    74% (17)
  • D
    9% (2)

Explanation

Virtual Network (VNet) service endpoint provides secure and direct connectivity to Azure services over an optimized route over the Azure backbone network. Endpoints allow you to secure your critical Azure service resources to only your virtual networks. Service Endpoints enables private IP addresses in the VNet to reach the endpoint of an Azure service without needing a public IP address on the VNet. Service endpoints are available for the following Azure services and regions. The Microsoft.* resource is in parenthesis. Enable this resource from the subnet side while configuring service endpoints for your service: Generally available Azure Storage (Microsoft.Storage): Generally available in all Azure regions. Azure Storage cross-region service endpoints (Microsoft.Storage.Global): Generally available in all Azure regions. *-> Azure SQL Database (Microsoft.Sql): Generally available in all Azure regions. https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoints-

Topics

#Azure App Service Networking#Private Connectivity#Service Endpoints#Cross-region Networking

Community Discussion

No community discussion yet for this question.

Full SC-100 Practice