An administrator needs to configure a Network Security Group (NSG) to allow outbound traffic from an Azure Virtual Network subnet to Azure SQL Database. The IP addresses for Azure SQL Database might change over time. The solution must minimize administrative overhead. Which NSG rule configuration should you recommend?
- ACreate outbound security rules containing the individual public IP addresses of the Azure SQL Database servers.
- BConfigure a User Defined Route (UDR) that overrides the default system route for SQL database endpoints to direct traffic to the internet.
- Set the destination of the outbound security rule to the Sql service tag.Cevap
- DDeploy a Basic Load Balancer in the subnet and bind its public frontend IP address to a Standard SKU public IP to handle outbound database requests.
Cevap
Set the destination of the outbound security rule to the Sql service tag.
Using the Sql service tag as the destination in the Network Security Group (NSG) outbound rule allows access to the Azure SQL Database service. Service tags represent a group of IP address prefixes from a given Azure service and are managed automatically by Microsoft, which minimizes administrative overhead.
Adım Adım Çözüm
Anahtar Kavram
Azure NSG Service Tags