Exam AZ-303 topic 9 question 1 discussion

Actual exam question from Microsoft's AZ-303

Question #: 1
Topic #: 9

HOTSPOT -
You need to recommend a solution for App1. The solution must meet the technical requirements.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

Box 1: 3 -
One virtual network for every tier

Box 2: 1 -
Only one subnet for each tier, to minimize the number of open ports.
Scenario: You have a public-facing application named App1. App1 is comprised of the following three tiers:
✑ A SQL database
✑ A web front end
✑ A processing middle tier
Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS only.
Technical requirements:
✑ Move all the virtual machines for App1 to Azure.
Minimize the number of open ports between the App1 tiers.

by Allahham at July 5, 2021, 8:40 a.m.

Comments

Submit Cancel

TJ01

Highly Voted 4 years ago

Should be 1 Vnet and 3 Subnets. See https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/n-tier/n-tier-sql-server

upvoted 39 times

rdemontis

4 years ago

Agree with you, thanks for posting the document

upvoted 1 times

...

israelbarros

3 years, 11 months ago

I agree

upvoted 1 times

...

pentium75

3 years, 12 months ago

Not sure because we're supposed to minimize the open ports between tiers. This is easier with 3 VNets than with 3 subnets in a single VNet.

upvoted 2 times

mingled

3 years, 12 months ago

Don't agree... You would need VNet peering + NSG's With 1 VNET and 3 Subnets, you simply control ports with Subnet Bound NSG's Creating 3 VNets would be overkill

upvoted 5 times

AD3

3 years, 5 months ago

3 VNETS : Costly, difficult to manage, difficult to operate, difficult to monitor. (difficult/complex). save cost and get bonus.

upvoted 1 times

...

syu31svc

Highly Voted 3 years, 11 months ago

3 virtual networks and one subnet per virtual network - Creating a virtual network for each application tier is not a best practice. 3 virtual networks and three subnets per virtual network - This solution will have 9 subnets, that is more than the number of servers for App1. 1 virtual network and one subnet per virtual network - This solution will have all servers deployed in the same subnet, that is not a best practice. Answer is 1 Vnet with 3 subnets

upvoted 5 times

...

news101

Most Recent 3 years, 6 months ago

Answer is correct from security. If we have one VNET everything will be talking to each other with the default VirtualNetwork Tag. WIth three VNETs you would have to specify the NSG rules, which would block off traffic when you create the peer.

upvoted 1 times

...

donathon

3 years, 8 months ago

1 VNet and 3 subnets. If we use 3 Vnet that would require higher admin effort. Also because of VNet peering, each Vnet will need to have 2 subnet include gateway subnet each.

upvoted 2 times

...