Exam AZ-303 topic 4 question 5 discussion

correct: https://docs.microsoft.com/en-us/azure/azure-sql/database/auto-failover-group-overview?tabs=azure-powershell

For two managed instances to participate in a failover group, there must be either ExpressRoute or a gateway configured between the virtual networks of the two managed instances to allow network communication. https://docs.microsoft.com/en-us/azure/azure-sql/managed-instance/failover-group-add-instance-tutorial?tabs=azure-portal#create-a-primary-gateway D is correct

Please note, Azure SQL Database managed instances, Not Azure SQL Database, Because each managed instance is isolated in its own VNet, two-directional traffic between these VNets must be allowed. See Azure VPN gateway Refer to Enable geo-replication traffic between two instances https://docs.microsoft.com/en-us/azure/azure-sql/managed-instance/auto-failover-group-sql-mi?tabs=azure-powershell

D is correct. One of the prerequisites to creating a failover group between two managed instances is to create a connection (could be VPN or an Express Route) between the VNETs hosting the primary and the secondary managed instances. See the link below for the guide to creating a failover group for managed instanced. You will need to either configure ExpressRoute or create a gateway for the virtual network of each SQL Managed Instance, connect the two gateways, and then create the failover group. https://docs.microsoft.com/en-us/azure/azure-sql/database/auto-failover-group-configure?tabs=azure-portal#sql-managed-instance There is also an option to configure PrivateLink with the failover group but that is not required for the failover group to work.

Correct is D. Here is the docu for the Azure SQL "Managed Instances" https://docs.microsoft.com/en-us/azure/azure-sql/database/auto-failover-group-configure?tabs=azure-portal#sql-managed-instance

on Exam today 21st Jan, 2022

Correct

I think this is the sentence which makes the answer D (site-to-site VPN), from https://docs.microsoft.com/en-us/azure/azure-sql/database/auto-failover-group-configure?tabs=azure-portal#sql-managed-instance You will need to either configure ExpressRoute or create a gateway for the virtual network of each SQL Managed Instance, connect the two gateways, and then create the failover group. As others have said, private link is only an option for Azure SQL Database, as per https://docs.microsoft.com/en-us/azure/private-link/availability

the majority of commenters here didn't have any clue about what peering is... It's clearly B.

To use the primary link, the primary and secondary servers are needed to be in a paired region. It is mentioned in the question that servers are in different regions. Hence correct Answer is D.

Careful! the document most cited here is https://docs.microsoft.com/en-us/azure/azure-sql/managed-instance/failover-group-add-instance-tutorial?tabs=azure-portal, which clearly says: "require Azure ExpressRoute, global VNet peering, or two connected VPN gateways." In other words, VPN is one solution but not required if you peer the networks. The document further explains the VPN option but also says that if the global networks are connected, you can skip this part. So VPN is not a must. However, there is another doc: https://docs.microsoft.com/en-us/azure/azure-sql/database/auto-failover-group-configure?tabs=azure-portal#use-private-link This is a much simpler setup where private link is the first step to achieve auto fail-over. In my humble opinion, using VPN within Azure networks is essentially wrong, and hence answer B is correct.

26-June-21, Passed the exam. Correct Answer

6/12/2021. Passed the exam. Site to site VPN

D is correct. Managed instances participating in a failover group require Azure ExpressRoute, global VNet peering, or two connected VPN gateways. https://docs.microsoft.com/en-us/azure/azure-sql/managed-instance/failover-group-add-instance-tutorial?tabs=azure-portal

FYI, peering is now supported. https://azure.microsoft.com/en-us/updates/global-virtual-network-peering-support-for-azure-sql-managed-instance-now-available/ https://docs.microsoft.com/en-us/azure/azure-sql/database/auto-failover-group-overview?tabs=azure-powershell#enabling-geo-replication-between-managed-instances-and-their-vnets

D is correct, as per the link https://docs.microsoft.com/en-us/azure/azure-sql/managed-instance/failover-group-add-instance-tutorial?tabs=azure-portal#4---create-a-primary-gateway

Correct: https://docs.microsoft.com/de-de/azure/azure-sql/database/auto-failover-group-overview?tabs=azure-powershell#enabling-geo-replication-between-managed-instances-and-their-vnets