<< Prev Question Next Question >>

Question 63/157

You have an Azure subscription that contains an Azure SQL Database logic server named SQL! and an Azure virtual machine named VM1. VM1 uses a private IP address only.
The Firewall and virtual networks settings for SQL1 are shown in the following exhibit.

You need to ensure that VM1 can connect to SQL1. The solution must use the principle of least privilege. What should you do?

Recent Comments (The most recent comments are at the top.)

sam rocks - Jul 21, 2024

Selected Answer: B
The Azure SQL Database firewall allows you to specify IP address ranges from which communications are accepted into SQL Database. This approach is fine for stable IP addresses that are outside the Azure private network. However, virtual machines (VMs) within the Azure private network are configured with dynamic IP addresses. Dynamic IP addresses can change when your VM is restarted and in turn invalidate the IP-based firewall rule. It would be folly to specify a dynamic IP address in a firewall rule, in a production environment.
You can work around this limitation by obtaining a static IP address for your VM. For details, see Create a virtual machine with a static public IP address using the Azure portal. However, the static IP approach can become difficult to manage, and it's costly when done at scale.
Virtual network rules are easier alternative to establish and to manage access from a specific subnet that contains your VMs.

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (157q)
Question 1: You have an Azure subscription. You plan to create a custom ...
Question 2: You have an Azure subscription that contains the virtual net...
Question 3: Lab Task use the following login credentials as needed: To e...
1 commentQuestion 4: You have two Azure virtual machines in the East US2 region a...
Question 5: You plan to implement JIT VM access. Which virtual machines ...
Question 6: You have an Azure Container Registry named ContReg1 that con...
Question 7: Your company has an Azure subscription named Sub1 that is as...
Question 8: You need to meet the identity and access requirements for Gr...
Question 9: You have two Azure subscriptions named Sub1 and Sub2. Sub1 c...
Question 10: You have an Azure subscription that contains the following r...
Question 11: You have the Azure virtual machines shown in the following t...
Question 12: You have an Azure subscription that contains an Azure key va...
Question 13: You have a Azure subscription that contains an Azure Contain...
Question 14: You have an Azure subscription that contains four Azure SQL ...
1 commentQuestion 15: You have an Azure subscription that contains the following r...
1 commentQuestion 16: You have an Azure subscription that contains the resources s...
Question 17: You have an Azure AD tenant that contains 500 users and an a...
Question 18: You need to configure an access review. The review will be a...
Question 19: You have an Azure subscription that contains 100 virtual mac...
Question 20: You have a hybrid configuration of Azure Active Directory (A...
Question 21: You have an Azure subscription that has a managed identity n...
Question 22: You need to perform the planned changes for OU2 and User1. W...
Question 23: You have a hybrid configuration of Azure Active Directory (A...
Question 24: Lab Task use the following login credentials as needed: To e...
Question 25: You are troubleshooting a security issue for an Azure Storag...
Question 26: You need to deploy Microsoft Antimalware to meet the platfor...
Question 27: You have an Azure Active Directory (Azure AD) tenant named C...
Question 28: You have an Azure subscription. You plan to map an online in...
Question 29: You have an Azure subscription. You plan to create a storage...
Question 30: You create an Azure subscription with Azure AD Premium P2. Y...
1 commentQuestion 31: You have an Azure subscription name Sub1 that contains an Az...
Question 32: You have an Azure subscription named Sub1 that contains the ...
Question 33: You have an Azure subscription that contains an Azure SQL da...
Question 34: You have an Azure subscription named Sub1 that is associated...
1 commentQuestion 35: From Azure Security Center, you need to deploy SecPol1. What...
Question 36: You have an Azure subscription that contains an Azure Files ...
1 commentQuestion 37: You have an Azure subscription. That contains the virtual ma...
1 commentQuestion 38: You have an Azure Active Directory (Azure AD) tenant that co...
1 commentQuestion 39: You have an Azure subscription that contains an Azure key va...
Question 40: Note: This question is part of a series of questions that pr...
Question 41: You are evaluating the security of VM1, VM2, and VM3 in Sub2...
Question 42: You have an Azure Sentinel deployment. You need to create a ...
Question 43: You have 10 on-premises servers that run Windows Server 2019...
1 commentQuestion 44: You have an Azure subscription named Sub1 that contains the ...
Question 45: You have been tasked with configuring an access review, whic...
Question 46: You have an on-premises network and an Azure subscription. Y...
Question 47: You have an Azure subscription. You plan to create a workflo...
Question 48: Your on-premises network contains the servers shown in the f...
Question 49: Note: The question is included in a number of questions that...
1 commentQuestion 50: You have an Azure subscription that contains a blob containe...
Question 51: You have an Azure virtual machines shown in the following ta...
Question 52: You have 15 Azure virtual machines in a resource group named...
Question 53: You need to ensure that you can meet the security operations...
Question 54: You have an Azure subscription that uses Microsoft Defender ...
Question 55: You have an Azure subscription that contains an Azure key va...
Question 56: Lab Task Task 5 A user named Debbie has the Azure app instal...
Question 57: You have an Azure Sentinel workspace that has the following ...
Question 58: You have an Azure subscription that contains a resource grou...
Question 59: You have 20 Azure subscriptions and a security group named G...
Question 60: You have an Azure subscription that contains a virtual netwo...
Question 61: You have an Azure Active Directory (Azure AD) tenant that co...
Question 62: You have an Azure Kubernetes Service (AKS) cluster that will...
1 commentQuestion 63: You have an Azure subscription that contains an Azure SQL Da...
Question 64: You have an Azure subscription that contains two virtual mac...
Question 65: You have an Azure Active Directory (Azure AD) tenant. You ha...
1 commentQuestion 66: You have an Azure AD tenant named contoso.com that has Azure...
Question 67: You have an Azure subscription named Sub1 that contains an A...
Question 68: You are evaluating the effect of the application security gr...
Question 69: Note: This question is part of a series of questions that pr...
Question 70: You have an Azure subscription that contains the resources s...
Question 71: Your network contains an Active Directory forest named conto...
Question 72: You have an Azure subscription that contains a web app named...
Question 73: Lab Task use the following login credentials as needed: To e...
1 commentQuestion 74: You need to encrypt storage1 to meet the technical requireme...
Question 75: You have an Azure subscription named Sub1. You create a virt...
Question 76: You have an Azure key vault named Vault1 that stores the res...
Question 77: You have an Azure subscription that contains an app named Ap...
Question 78: You have an Azure subscription that contains a web app named...
1 commentQuestion 79: You have an Azure subscription that contains an Azure SQL se...
Question 80: You have an Azure subscription that contains the following r...
Question 81: You have an Azure subscription that contains a web app named...
Question 82: Note: The question is included in a number of questions that...
Question 83: From the Azure portal, you are configuring an Azure policy. ...
Question 84: You plan to use Azure Log Analytics to collect logs from 200...
Question 85: Your company recently created an Azure subscription. You hav...
Question 86: You have Azure virtual machines that have Update Management ...
Question 87: You have an Azure subscription that contains the resources s...
Question 88: Lab Task use the following login credentials as needed: To e...
Question 89: Lab Task use the following login credentials as needed: To e...
1 commentQuestion 90: You have an Azure resource group that contains 100 virtual m...
Question 91: You have an Azure subscription that contains the resources s...
Question 92: You have an Azure subscription named Sub1. Sub1 has an Azure...
Question 93: You have an Azure subscription that contains the resources s...
1 commentQuestion 94: You have an Azure subscription named Subscription1 that cont...
1 commentQuestion 95: You have an Azure subscription that contains an Azure SQL da...
Question 96: You need to ensure that the Azure AD application registratio...
Question 97: You have an Azure subscription that contains 100 virtual mac...
Question 98: You have an Azure subscription that contains an Azure Sentin...
Question 99: You have an Azure subscription that contains a You need to g...
Question 100: You have an Azure subscription that contains three storage a...
Question 101: You have an Azure subscription. You create an Azure web app ...
Question 102: Note: This question is part of a series of questions that pr...
Question 103: You are evaluating the security of the network communication...
Question 104: You create a new Azure subscription. You need to ensure that...
Question 105: You have an Azure subscription named Sub1. You have an Azure...
Question 106: You have an Azure Storage account named storage1 that has a ...
Question 107: You have an Azure subscription that contains a user named Ad...
Question 108: You have an Azure Storage account named storage1 that has a ...
Question 109: Lab Task use the following login credentials as needed: To e...
Question 110: You have an Azure subscription that contains an Azure SQL da...
Question 111: Note: This question is part of a series of questions that pr...
Question 112: You have an Azure AD tenant that contains the users shown in...
1 commentQuestion 113: You have an Azure subscription that contains a user named Us...
Question 114: Your network contains an on-premises Active Directory domain...
Question 115: You have an Azure subscription that contains the Azure Activ...
Question 116: You have an Azure subscription. You need to create and deplo...
Question 117: You have an Azure Active Directory (Azure AD) tenant named c...
Question 118: Your network contains an Active Directory forest named conto...
Question 119: You plan to use Azure Resource Manager templates to perform ...
Question 120: Note: This question is part of a series of questions that pr...
Question 121: You have an Azure subscription that contains a user named Ad...
Question 122: Note: This question is part of a series of questions that pr...
Question 123: You plan to create an Azure Kubernetes Service (AKS) cluster...
Question 124: Your company has two offices in Seattle and New York. Each o...
Question 125: You suspect that users are attempting to sign in to resource...
Question 126: You have the Azure virtual machines shown in the following t...
Question 127: You have an Azure subscription named Subscription1 that cont...
1 commentQuestion 128: You have a network security group (NSG) bound to an Azure su...
Question 129: You have an Azure subscription mat contains a resource group...
Question 130: You have multiple development teams that will create apps in...
Question 131: You are collecting events from Azure virtual machines to an ...
1 commentQuestion 132: You have an Azure subscription that uses Microsoft Defender ...
1 commentQuestion 133: You have an Azure subscription that contains a user named Us...
1 commentQuestion 134: You have an Azure Active Directory (Azure AD) tenant that co...
1 commentQuestion 135: You have the Azure Information Protection conditions shown i...
Question 136: You have an Azure subscription named Subscription1 that cont...
Question 137: You have an Azure Active Directory (Azure AD) tenant and a r...
Question 138: You have an Azure subscription that contains virtual machine...
Question 139: You have an Azure subscription that contains the users shown...
Question 140: You have an Azure Active Directory (Azure AD) tenant that co...
Question 141: You need to create Role1 to meet the platform protection req...
Question 142: You have an Azure subscription that contains a resource grou...
Question 143: Your network contains an on-premises Active Directory domain...
Question 144: Note: This question is part of a series of questions that pr...
Question 145: Lab Task use the following login credentials as needed: To e...
Question 146: Your on-premises network contains the servers shown in the f...
Question 147: You have an Azure Storage account that contains a blob conta...
1 commentQuestion 148: You have an Azure subscription that contains the storage acc...
Question 149: You have an Azure SQL database. You implement Always Encrypt...
Question 150: You have an Azure Sentinel workspace that contains an Azure ...
Question 151: You need to configure support for Azure Sentinel notebooks t...
Question 152: You have an Azure subscription that contains an instance of ...
Question 153: You have an Azure subscription named Sub 1 that is associate...
Question 154: You have an Azure subscription that contains the resources s...
Question 155: You need to create an Azure key vault. The solution must ens...
Question 156: You have an Azure subscription named Sub1 that is associated...
Question 157: You company has an Azure subscription named Sub1. Sub1 conta...