Correct Answer: Place the database in a private subnet and do NOT assign any public IP addresses to the instances
To secure multi-tier applications, the database tier should be restricted to a private subnet with all public IP addresses disabled, forcing all communication to route through back...
Correct Answer
Place the database in a private subnet and do NOT assign any public IP addresses to the instances
Why This Answer Is Correct
To secure multi-tier applications, the database tier should be restricted to a private subnet with all public IP addresses disabled, forcing all communication to route through backend networks.
This question evaluates your knowledge of Scenario Based — a core concept tested in Microsoft Certified: Azure Administrator Associate (AZ-104). Understanding Scenario Based is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Scenario: A company wants to host a public website on Azure. They need a service that provides global scale, SSL offloading, and WAF protection. Which service is the BEST fit?
Scenario: An administrator needs to migrate a legacy on-premises application to Azure that requires a shared folder accessed by SMB. Which service should they use?
Scenario: An organization wants to allow their developers to self-provision environments but needs to ensure they only use a specific set of VM sizes to keep costs under control. Which feature should be used?
Scenario: A university needs to host a website that handles seasonal registration spikes. They need a solution that can automatically scale up and down based on the number of concurrent sessions. Which service is BEST?
Scenario: An administrator wants to receive a mobile push notification whenever anyone deletes a resource in a production subscription. Which combination should be used?