Exam DP-300 topic 2 question 40 discussion

Actual exam question from Microsoft's DP-300

Question #: 40
Topic #: 2

You have an Azure subscription.

You create a logical SQL server that hosts four databases. Each database will be used by a separate customer.

You need to ensure that each customer can access only its own database. The solution must minimize administrative effort.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A. Deny public access.
B. Create a private endpoint.
C. Create a database-level firewall rule.
D. Create a network security group (NSG).
E. Create a server-level firewall rule.

Show Suggested Answer

Suggested Answer: C 🗳️

by geggio at July 12, 2023, 5:43 p.m.

Comments

Submit Cancel

geggio

Highly Voted 1 year, 11 months ago

ANSWER B, AND C

upvoted 8 times

...

d57ff1a

Highly Voted 1 year, 6 months ago

I see that most people voted for B and C. However, based on Microsfot documentation, you cannot create database-level firewall rule without configuring server-level firewall rule first: "You can only create and manage database-level IP firewall rules for master and user databases by using Transact-SQL statements and only after you configure the first server-level firewall." Any thoughts? Reference: https://learn.microsoft.com/en-us/azure/azure-sql/database/firewall-configure?view=azuresql

upvoted 7 times

voodoo_sh

5 months, 1 week ago

you have the point: In Azure SQL Database, you must first create a server-level firewall rule before you can create database-level firewall rules. The server-level firewall rule is necessary to allow initial access to the server, after which you can configure more granular database-level firewall rules to control access to individual databases

upvoted 1 times

...