You have an Azure subscription.
You create a logical SQL server that hosts four databases. Each database will be used by a separate customer.
You need to ensure that each customer can access only its own database. The solution must minimize administrative effort.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
To ensure each customer can access only its own database while minimizing administrative effort, you should create a private endpoint and a database-level firewall rule. Creating a private endpoint will restrict access to the logical SQL server so that it is only reachable via the private network, enhancing security. A database-level firewall rule allows you to specify IP ranges that can access individual databases, ensuring that each customer can only access their own database.
ANSWER B, AND C
I see that most people voted for B and C. However, based on Microsfot documentation, you cannot create database-level firewall rule without configuring server-level firewall rule first: "You can only create and manage database-level IP firewall rules for master and user databases by using Transact-SQL statements and only after you configure the first server-level firewall." Any thoughts? Reference: https://learn.microsoft.com/en-us/azure/azure-sql/database/firewall-configure?view=azuresql
Answer is B & C, question says 2 actions. please update the answer
B. Create a private endpoint. C. Create a database-level firewall rule.
Two options so B and C
CE https://learn.microsoft.com/en-us/azure/azure-sql/database/firewall-configure?view=azuresql
ANSWER B, AND C
How does B, a private endpoint, help isolate 4 different databases? Wouldn’t you need 4 private endpoints? I feel like B is wrong?
Verbiage may just be poor… really diving it is seems like B and C are really the only valid choices.
BC is correct
Answer is BC
C. Create a database-level firewall rule.