DP-300 Plan and implement data platform resources Practice Question
You are deploying an Azure SQL Managed Instance for a legacy application that requires SQL Server Agent jobs and cross-database queries. The instance must be able to access an on-premises file share for backup and restore operations. You need to configure network connectivity so that the managed instance can communicate with the on-premises network. What should you implement?
⚠ Common exam trap
A common mix-up: candidates confuse inbound connectivity to the managed instance with outbound connectivity from the managed instance to on-premises resources, leading to the selection of a public endpoint or Private Link instead of a VPN or ExpressRoute.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure a site-to-site VPN or ExpressRoute between the on-premises network and the Azure virtual network that hosts the managed instance.
Azure SQL Managed Instance is deployed in a virtual network subnet and requires a site-to-site VPN or ExpressRoute to communicate with on-premises resources. This provides a private, secure connection that allows the managed instance to access on-premises file shares for backup and restore. Public endpoints, VNet peering, and Private Link do not provide the necessary outbound connectivity to on-premises networks.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable a public endpoint on the managed instance and allow access from the on-premises public IP address.
Why it's wrong here
A public endpoint on a managed instance is used for client connections, not for the managed instance to initiate outbound connections to on-premises resources. It does not provide the managed instance with access to on-premises file shares. Additionally, exposing the instance publicly may violate security requirements.
- ✓
Configure a site-to-site VPN or ExpressRoute between the on-premises network and the Azure virtual network that hosts the managed instance.
Why this is correct
Azure SQL Managed Instance is deployed inside an Azure virtual network subnet and requires network connectivity to on-premises resources. A site-to-site VPN or ExpressRoute provides the necessary private connection. This allows the managed instance to access on-premises file shares and other resources securely without exposing them to the public internet.
- ✗
Create a VNet peering between the managed instance subnet and the on-premises network.
Why it's wrong here
VNet peering connects two Azure virtual networks, not an on-premises network. It cannot be used to connect directly to on-premises infrastructure. To connect to on-premises, you need a VPN or ExpressRoute. VNet peering alone does not provide the required connectivity.
- ✗
Configure an Azure Private Link endpoint for the managed instance and connect it to the on-premises network.
Why it's wrong here
Azure Private Link is used to access Azure services over a private endpoint from a virtual network, but it does not provide outbound connectivity from the managed instance to on-premises resources. The managed instance needs to initiate connections to the file share, which requires a VPN or ExpressRoute.
Visual reference
Go deeper
Related to this question
Learn chapter
Migrating On-Premises Databases to Azure
Key term
Azure SQL Managed Instance
Azure SQL Managed Instance is a fully managed cloud database service that gives you nearly all the features of Microsoft SQL Server on your own server, without you having to manage the hardware or operating system.
About these practice questions
Courseiva writes every DP-300 question from scratch — 574 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This DP-300 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-300 exam.