Exam AZ-900 topic 1 question 32 discussion

The local network gateway is a specific object that represents your on-premises location (the site) for routing purposes.

A local network gateway represents the hardware or software VPN device in your local network. Use this with a connection to set up a site-to-site VPN connection between an Azure virtual network and your local network.

A Local Network Gateway in Azure is used to connect an on-premises network to Azure via VPN. It does not control connection types between Azure web servers and database servers. Local Network Gateway does not meet the requirement.

No because local network gateway represents your on-prem location

Network Security Groups.

Network security group is the answer

ANSWER is NO - The correct approach should be that Azure AD Connect is the right choice, as it is primarily used for integrating on-premises directories with Azure Active Directory. It allows for the synchronization of user accounts, groups, and attributes between on-premises Active Directory and Azure AD

The answer is no, We can go for network security groups.

B. No Explanation: A Local Network Gateway in Azure is used to establish a connection between an organization's on-premises network and the Azure virtual network. It is not designed to directly control connection types between web servers and database servers within the Azure virtual network. To control connection types between web servers and database servers in Azure, a better approach would be to use Azure Network Security Groups (NSGs) or Azure Web Application Firewall (WAF). . These features allow you to define specific security rules to allow or deny traffic between different infrastructure components in Azure. Therefore, adding an on-premises network gateway does not serve the purpose of controlling the connection types between web servers and database servers in Azure.

No, including a local network gateway in your strategy does not directly meet the goal of controlling connection types between web servers and database servers within Azure. While local network gateways are useful for establishing secure site-to-site VPN connections between your on-premises network and Azure virtual networks, they don't provide granular control over internal connections within Azure itself.

The correct answer is Network Security Groups - NSG. This will allow to control either inbound or outbound connections btw the two.

B

NO. A local network gateway in Azure is typically used when you want to establish a connection between your Azure virtual network and an on-premises network or another network outside of Azure. It's not directly related to controlling connection types between web servers and database servers within the same Azure virtual network. To control the connection types between web servers and database servers in Azure, you would typically use Network Security Groups (NSGs), which allow you to define inbound and outbound traffic rules to control the flow of traffic between resources in a virtual network. You might also consider using Azure Firewall or Azure Application Gateway depending on your specific requirements. So, including a local network gateway in your strategy is not the correct solution for controlling connections between web servers and database servers within Azure.

The Network Security Group would meet the goal.

B. No - the local NG is to connect between local and virtual networks (or VPN for private access). The Network Security Group would meet the goal.

Local NG is exactly as it sounds. LOCAL. The question is talking about azure based hosting.

filter connection/allow or denny connection ---> NSG Rules---> Az Firewall Attack --> DDOS