DP-800: Developing AI-Enabled Database Solutions

By Microsoft · Question Mode

QuestionQ34

Secure, optimize, and deploy database solutions

You have an Azure subscription containing an Azure SQL database named SalesDB and an Azure App Service app named sales-api. The sales-api app uses virtual network integration with the vnet-prod/subnet-app subnet and reads data from SalesDB.

Configure authentication and network access to meet these requirements:

  • Make sure sales-api connects to SalesDB by using passwordless authentication.
  • Ensure that all database traffic stays within the subscription.
  • Minimize administrative effort.

What should you configure?

Select
Authentication for sales-api:
Network access for SalesDB:
Explanation

An App Service managed identity can authenticate to Azure SQL through Microsoft Entra ID, eliminating stored SQL passwords and their rotation. An Azure SQL private endpoint exposes the database through a private IP address in the virtual network; disabling public network access prevents use of the public endpoint, so the VNet-integrated app accesses the database privately.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!