Exam AZ-500 topic 6 question 19 discussion

Dedicated subnet: The subnet SQL Managed Instance can be delegated only to the SQL Managed Instance service. Network security group: A network security group must be associated with the SQL Managed Instance subnet. Route table: A route table must be associated with the SQL Managed Instance subnet.

Answers are correct: https://learn.microsoft.com/en-us/azure/azure-sql/managed-instance/connectivity-architecture-overview?view=azuresql&tabs=current#network-requirements

Key Requirements for Azure SQL Managed Instance: Dedicated Subnet: Azure SQL Managed Instance requires its own dedicated subnet within the same virtual network as VM1. This subnet must be configured with delegation to "Microsoft.Sql/managedInstances". ✅ Correct Choice: A. a subnet Network Security Group (NSG) for Access Control: NSGs can be used to control traffic between VM1 and SQL1. You must allow inbound/outbound traffic on the required ports (e.g., port 1433 for SQL access). ✅ Correct Choice: D. a network security group (NSG) Route Table to Ensure Proper Routing: SQL Managed Instance uses forced tunneling, and custom route tables may be required to ensure traffic flows correctly between VM1 and SQL1. ✅ Correct Choice: E. a route table

Correct Answers (A, D, E) A. a subnet: Create a dedicated subnet for SQL1. D. a network security group (NSG): Control traffic to the subnet where SQL1 is deployed. E. a route table: Ensure proper routing between VM1 and SQL1. These components will enable secure access from VM1 to SQL1.