A financial services company is designing the migration of an on-premises database cluster to Azure. The cluster hosts several databases that perform cross-database transactions using Distributed Transaction Coordinator (DTC) and run scheduled data extraction jobs using SQL Server Agent. The database security policy dictates that the data store must not be accessible via the public internet and must reside within a private network. The design must minimize administrative overhead.
Which two components should you include in the recommended design? (Select TWO.)
- Azure SQL Managed InstanceAnswer
- A delegated subnet in an Azure Virtual NetworkAnswer
- CAzure SQL Database elastic pools
- DAzure SQL Database single database
- ESQL Server on Azure Virtual Machines
Answer
Azure SQL Managed Instance and a delegated subnet in an Azure Virtual Network
To satisfy the compatibility requirements for SQL Server Agent and Distributed Transaction Coordinator (DTC) while minimizing administrative overhead, the design must utilize Azure SQL Managed Instance (PaaS). To satisfy the network security requirement of preventing public internet access, Azure SQL Managed Instance must be deployed directly into a delegated subnet in an Azure Virtual Network, which provides private IP connectivity and network isolation.
Step-by-Step Solution
Key Concept
Selecting and configuring the appropriate Azure SQL relational database deployment option based on compatibility, management overhead, and network security requirements.