You are migrating a legacy three-tier application to Azure. The web tier is on VMs, the logic tier uses serverless functions, and the data tier is a managed SQL database. How should you secure the communication between these tiers?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Use Network Security Groups (NSGs) and Service Endpoints

NSGs filter traffic between subnets/tiers, and Service Endpoints secure access to managed services like Azure SQL....

๐Ÿ“‹Part of Microsoft Certified: Azure Fundamentals (AZ-900) ยท Azure Certification Practice
Real Exam ScenarioScenario Based

You are migrating a legacy three-tier application to Azure. The web tier is on VMs, the logic tier uses serverless functions, and the data tier is a managed SQL database. How should you secure the communication between these tiers?

โœ“ Correct Answer & ExplanationScenario Based

Correct Answer

Use Network Security Groups (NSGs) and Service Endpoints

Why This Answer Is Correct

NSGs filter traffic between subnets/tiers, and Service Endpoints secure access to managed services like Azure SQL.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Scenario Based โ€” a core concept tested in Microsoft Certified: Azure Fundamentals (AZ-900). Understanding Scenario Based is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.