Home » Microsoft » 70-473 v.2 » What should you use?
You have 10 Microsoft Azure SQL database.
One of the databases is named DB1.
You need to ensure that only a specific IP address can be used to access DB1. The solution must affect only DB1.
What should you use?
A. the sp_set_database_firewall_rule statement
B. the New-AzureSqlDatabaseServerFirewallRule cmdlet
C. the Azure portal to add an endpoint
D. the Set-AzureSqlDatabaseServerFirewallRule cmdlet
Correct Answer: B
Explanation/Reference:
If the IP address of the request is within one of the ranges specified in the database-level firewall rules, the connection is granted to the SQL Database that contains the rule.
The New-AzureSqlDatabaseServerFirewallRule cmdlet creates a firewall rule in the specified instance of Azure SQL Database Server in the current subscription.
Use the StartIpAddress and EndIpAddress parameters to specify a range of IP addresses that this rule allows to connect to the Azure SQL Database server.
Specify the AllowAllAzureServices parameter to create a rule that allows Azure connections to the server. The rule has starting and ending IP address values of 0.0.0.0. If you do not specify a firewall rule name, this cmdlet assigns the default name AllowAllAzureServices.
References: https://docs.microsoft.com/en-us/powershell/module/servicemanagement/azure/new-azuresqldatabaseserverfirewallrule?view=azuresmps-4.0.0
