SC-100 Certification Practice Question #282

Question

You need to recommend a solution to meet the requirements for connections to ClaimsDB.
What should you recommend using for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Accepted Answer

The two requirements map cleanly to two Azure features. "ClaimsApp will access data in ClaimsDB" without storing credentials is the textbook App Service managed identity passwordless pattern documented by MS Learn (create an external-provider DB user mapped to the identity's SID) → Box 2 = managed identity, which the entire thread agrees on. "ClaimsDB must be accessible only from Azure virtual networks" is satisfied by a private endpoint, which gives the SQL instance a private VNet IP and lets it disable public access; the top-voted comment (👍 26) and multiple confirmations select it. A service endpoint (the minority view) also restricts to VNets and is cheaper, which is why confidence is held at 83 rather than higher — but the dominant community signal and the per-instance, public-access-disabling guarantee of Private Link make private endpoint the keyed answer.

More SC-100 practice questions