Examkin

Question

Difficulty: MediumRelational Data Storage Solutions

A financial services firm is designing the cloud database architecture for a new customer portal. The design must satisfy the following requirements:

* Automatically fail over to a secondary Azure region with no client connection string modifications.
* Restrict database access to private IP addresses within a specific virtual network, preventing all public internet access.
* Minimize administrative overhead for database operations and patching.

Which two features or configurations should you include in the design?

  1. Azure SQL Database failover groupsAnswer
  2. Private endpoints for Azure SQL DatabaseAnswer
  3. C
    Active geo-replication for Azure SQL Database
  4. D
    SQL Server on Azure Virtual Machines with Always On availability groups
  5. E
    Locally Redundant Storage (LRS) for the database backup storage tier

Answer

Azure SQL Database failover groups and Private endpoints for Azure SQL Database
The correct options are Azure SQL Database failover groups and Private endpoints for Azure SQL Database. Azure SQL Database failover groups manage database replication and failover to a secondary region, providing a single listener that automatically routes client traffic without connection string updates. Private endpoints secure the database within a virtual network using private IP addresses, allowing public endpoints to be disabled to satisfy network security requirements. Both features are native to Azure SQL Database, which minimizes administrative overhead as a fully managed service.

Step-by-Step Solution

1
Analyze the high availability and client redirection requirements.
Azure SQL Database failover groups provide automatic failover and a single listener, removing the need for connection string modifications, unlike active geo-replication which requires manual client redirection.
This identifies the correct feature for regional disaster recovery without client disruption.
2
Analyze the network security requirement.
Private endpoints assign private IP addresses from the virtual network, allowing public access to be completely disabled.
This satisfies the requirement to secure access using private IP addresses within a VNet.
3
Evaluate administrative overhead.
Azure SQL Database is a fully managed Platform as a Service (PaaS) that handles OS and database patching automatically, whereas SQL Server on Azure Virtual Machines (IaaS) requires manual maintenance.
This filters out Infrastructure as a Service (IaaS) solutions to minimize management effort.

Key Concept

Azure SQL Database High Availability and Networking Features
Estimated Time:1m 30s
Rate this question

Topics

Relational Data Storage Solutions

More questions from this topic