AZ-305 Question 97
Select 2You are designing a data integration solution to regularly ingest data from on-premises SQL Server databases as well as external SaaS sources into Azure Data Lake Storage Gen2. You need to ensure secure data transfer, minimal latency, and cost-effectiveness while consolidating these datasets for downstream analytics in Azure Synapse Analytics. Which two approaches should you include in your design?
- A
A. Use a Self-Hosted Integration Runtime for the on-premises SQL Server and configure private endpoints for data transfer
- B
B. Store all ingested data in Azure Files shares before moving it to Azure Data Lake Storage Gen2
- C
C. Directly expose your on-premises SQL Server instance to the internet for Azure Data Factory access
- D
D. Rely exclusively on a public endpoint for SaaS data ingestion in order to reduce management overhead
- E
E. Use Data Factory integration with a secure VPN or ExpressRoute for highly sensitive data
Show answer and explanation
Correct answers: A, E
Explanation
When designing a solution that integrates on-premises and SaaS data into Azure Data Lake Storage Gen2, security and performance are paramount. A Self-Hosted Integration Runtime allows secure data movement between on-premises and cloud environments. Private endpoints (or secure VPN connections, ExpressRoute in some cases) maintain data within a trusted network path. Refer to Azure documentation at https://learn.microsoft.com/azure/data-factory/ for configuring Self-Hosted Integration Runtime and creating private endpoints for optimized, secure data transfers.
- A. Correct.
A. Correct. A Self-Hosted Integration Runtime (SHIR) is recommended for secure data movement from on-premises SQL Server. Using private endpoints further secures data transfer and helps avoid sending data over the public internet.
- B. Incorrect.
B. Incorrect. Storing data in Azure Files first may add unnecessary complexity and extra storage cost. Typically, loading data directly into Azure Data Lake Storage Gen2 is more efficient and cost-effective.
- C. Incorrect.
C. Incorrect. Exposing an on-premises database directly to the internet is a significant security risk. Using managed connections (like SHIR) provides a more secure alternative without opening inbound ports.
- D. Incorrect.
D. Incorrect. Relying solely on public endpoints can compromise security. Private endpoints or secured networks are a best practice for production data transfers, even for SaaS sources.
- E. Correct.
E. Correct. In scenarios with highly sensitive data, integrating Azure Data Factory with a secure VPN or ExpressRoute can help ensure data is transmitted securely and with minimal latency.