Exam DP-200 All Questions

View all questions & answers for the DP-200 exam

Exam DP-200 topic 3 question 12 discussion

Actual exam question from Microsoft's DP-200

Question #: 12
Topic #: 3

You have an Azure SQL server named Server1 that hosts two development databases named DB1 and DB2.
You have an administrative workstation that has an IP address of 192.168.8.8. The development team at your company has an IP addresses in the range of
192.168.8.1 to 192.168.8.5.
You need to set up firewall rules to meet the following requirements:
✑ Allows connection from your workstation to both databases.
✑ The development team must be able connect to DB1 but must be prevented from connecting to DB2.
✑ Web services running in Azure must be able to connect to DB1 but must be prevented from connecting to DB2.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. Create a firewall rule on DB1 that has a start IP address of 192.168.8.1 and an end IP address of 192.168.8.5.
B. Create a firewall rule on DB1 that has a start and end IP address of 0.0.0.0.
C. Create a firewall rule on Server1 that has a start IP address of 192.168.8.1 and an end IP address of 192.168.8.5.
D. Create a firewall rule on DB1 that has a start and end IP address of 192.168.8.8.
E. Create a firewall rule on Server1 that has a start and end IP address of 192.168.8.8.

Show Suggested Answer

Suggested Answer: ACE 🗳️

by SidN at June 6, 2020, 4:53 p.m.

Comments

Submit Cancel

SidN

Highly Voted 5 years ago

ABE should be the correct answer. (C will allows developers to connect to DB2 as well)

upvoted 53 times

dip17

4 years, 11 months ago

Agreed. ABE should be the answer.

upvoted 4 times

...

indradatabricks

4 years, 11 months ago

In that case, any IP would be able to access DB1 which is NOT expected.....right?

upvoted 1 times

als2kool

4 years, 9 months ago

Correct Why do A & B?

upvoted 1 times

...

hoangton

3 years, 12 months ago

ACE are correct. C and E allow administrator and developer to connect server but A allow developer to connect to DB1 only

upvoted 1 times

...

memo43

4 years ago

why not ADE?

upvoted 1 times

...

Load full discussion...

...

diulin

Highly Voted 4 years, 11 months ago

ABE B: "When you add a database-level firewall setting where the beginning and ending IP addresses are equal to 0.0.0.0, you enable access to your database in the SQL Database server from any Azure resource." src: https://docs.microsoft.com/en-us/sql/relational-databases/system-stored-procedures/sp-set-database-firewall-rule-azure-sql-database

upvoted 35 times

Deepali_dd

4 years, 6 months ago

Thanks :)

upvoted 1 times

...

cadio30

Most Recent 4 years, 1 month ago

ABE is the appropriate answers A - allows the development team to access only the database level and this can only be configure using T-SQL and not from the azure portal B - the ip address 0.0.0.0 allows the connection between azure services in which there is an option in the SQL Server firewall to toggle this feature E - this is no suprise as the administrator requires to whitelist his ip address to manage both databases

upvoted 2 times

...

KpKo

4 years, 1 month ago

Agreed, ABE should be the correct answer.

upvoted 2 times

...

Wendy_DK

4 years, 1 month ago

ABE should be the correct answer

upvoted 1 times

...

MKJOHN

4 years, 3 months ago

The answer should be ABE. Please correct this or explain why, thanks.

upvoted 1 times

...

watata

4 years, 3 months ago

it should be ABD

upvoted 1 times

MKJOHN

4 years, 3 months ago

D would not allow for administrative tasks on the server for any database.

upvoted 1 times

...

maynard13x8

4 years, 6 months ago

"If you specify an IP address range in the database-level IP firewall rule that's outside the range in the server-level IP firewall rule, only those clients that have IP addresses in the database-level range can access the database." https://docs.microsoft.com/en-us/azure/azure-sql/database/firewall-configure If select ABE, are you giving access to DB1 to ip xxxxxx.8 by the rule 0.0.0.0 (option B)?

upvoted 1 times

...