Exam DP-900 topic 1 question 89 discussion

Correct answer: "a server level firewall" Azure SQL has it's own Firewall and firewall rules options It is not "Azure Firewall" though: "Azure Firewall is a managed, cloud-based network security service that protects your Azure Virtual Network resources. It's a fully stateful firewall as a service with built-in high availability and unrestricted cloud scalability."

Correct Answer is B https://docs.microsoft.com/en-us/azure/azure-sql/database/firewall-create-server-level-portal-quickstart#:~:text=A%20server%2Dlevel%20IP%20firewall%20rule%20can%20open%20port%201433,a%20range%20of%20IP%20addresses.&text=By%20default%2C%20access%20through%20the,disabled%20for%20all%20Azure%20services.&text=A%20server%2Dlevel%20IP%20firewall%20rule%20is%20created%20for%20your,port%201433%20on%20the%20server.

option B

Answer is B. Database-level rules are not configured by default and need to be set up for more granular control.

CORRECT ANSWER...

Correct Answer

Exam: 05/18/2022

Select Set server firewall on the toolbar. The Firewall settings page for the server opens.

Can someone please clarify this aspect regarding Azure SQL Database? From Microsoft website I can see two different graph of how firewall works: 1) https://docs.microsoft.com/en-us/azure/security/fundamentals/infrastructure-sql Internet > Server-Level Firewall rules > Database-Level Firewall rules > Database access 2) https://docs.microsoft.com/en-us/azure/azure-sql/database/firewall-configure Internet > Database-Level Firewall rules > Server-Level Firewall rules > Database access By looking at the different algorithms, if we have an IP allowed in both Database-Level Firewall (for Database1) and Server-Level Firewall (which allows access to every database) we have two different scenario if 1) is the correct implementation, we can access every database (Database1, Database2, Database3, Database4) if 2) is the correct implementation, we can access only Database1 Which is the correct one?

Correct answer is B. Reference is given below: https://docs.microsoft.com/en-us/azure/azure-sql/database/firewall-configure When you create a new server in Azure SQL Database or Azure Synapse Analytics named mysqlserver, for example, a server-level firewall blocks all access to the public endpoint for the server (which is accessible at mysqlserver.database.windows.net).

Server level firewall

Server Firewall is the correct answer but one can enhance the security by executing a script to add a database firewall

itt should be B

azure firewall - by default

Por defecto es Azure Firewall, el Server firewall debe configurarse, por ende la correcta es la Azuere Firewall.

correct

"each" database = > database firewall