DP-300 Implement a secure environment Practice Question
You need to ensure that Azure SQL Database can only be accessed from a specific virtual network in Azure. Which configuration should you apply?
⚠ Common exam trap
Many candidates confuse service endpoints (which filter by VNet subnet identity) with firewall IP rules (which filter by public IP address), leading them to incorrectly select Option A or assume that denying public access alone (Option D) is sufficient.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure a virtual network service endpoint and add a firewall rule for the VNet subnet
Configuring a virtual network service endpoint for Azure SQL Database and then adding a firewall rule for the specific VNet subnet restricts access to traffic originating from that subnet only. This ensures that the database is not reachable over the public internet, but only from the designated virtual network, meeting the requirement precisely.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Add the public IP address range of the VNet to the firewall rules
Why it's wrong here
VNet traffic uses private IPs, not public, so this won't work.
- ✓
Configure a virtual network service endpoint and add a firewall rule for the VNet subnet
Why this is correct
Service endpoints allow VNet traffic to be identified and permitted via firewall rules.
- ✗
Create a private endpoint and disable public network access
Why it's wrong here
This allows access from the private endpoint, but does not restrict to a specific VNet unless combined with NSG.
- ✗
Set 'Deny public network access' to Yes
Why it's wrong here
Blocks all public access, but also blocks VNet traffic unless private endpoint is used.
Visual reference
Go deeper
Related to this question
Learn chapter
Overview of Azure Data Platform Options
Key term
Azure SQL Performance Tuning
Azure SQL Performance Tuning is the process of optimizing the speed and efficiency of queries and database operations in Microsoft Azure SQL Database or SQL Managed Instance to reduce latency and improve throughput.
About these practice questions
Courseiva writes every DP-300 question from scratch — 906 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DP-300 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-300 exam.