You work for MDFT Pro, a well-known training agency with an on-premises Microsoft SQL Server 2019 server that hosts a critical database named CourseLibrary. Mark, the Cloud Migration Specialist, has an Azure subscription that contains an Azure SQL managed instance named TrainingDB and a virtual network named TrainingVNET. The TrainingDB managed instance resides on TrainingVNET, and the on-premises network connects to TrainingVNET through an ExpressRoute connection to ensure secure, high-bandwidth connectivity. Mark plans to migrate the CourseLibrary database to TrainingDB using the Azure Database Migration Service to minimize downtime during the migration. Before starting the migration, he has asked you to configure TrainingVNET to properly support the Database Migration Service connectivity requirements.
[comment]: <> (AI-NOTE: According to Microsoft Learn DMS documentation, in addition to service endpoints, you must also configure Network Security Group (NSG) rules to not block port 443 for ServiceTags of ServiceBus, Storage, and AzureMonitor. The current answer is incomplete - it should be a multiple-choice question requiring both service endpoints AND NSG configuration, or the explanation should mention that NSG configuration is also necessary.)
What should you do?
Choose the correct answer from the options below.
Explanations for each answer: