Exam DP-300 topic 2 question 52 discussion

Firewall Rule C) Allow traffic from a specific Virtual Network This option is the most secure and aligns with the principle of least privilege by restricting access to only the specified virtual network, which contains your VMs. By allowing traffic from a specific Virtual Network, you ensure that only resources within that network can access the database, minimizing exposure to unauthorized access. Network Connectivity B) Create a private endpoint Creating a private endpoint allows secure connectivity to DB1 from your VMs over the Azure backbone network. This method ensures that traffic does not traverse the public internet, enhancing security and performance. It also simplifies network management by using private IP addresses for communication.

Network Connectivity: Private Endpoint, so DB1 can get a private IP address in target virtual network and Subnet. Firewall Rule: use the Allow traffic from a specific Virtual Network use the sp_set_database_firewall_rule to add 10 rules for private IP addresses of 10 virtual machines that are hosted in a Subnet (or add a range, for example 10.0.0.1 to 10.0.0.10)