An analytics engineer must ingest data from a SQL Server instance that runs on a server inside the company data centre, with no public endpoint, into a "Lakehouse" using "Dataflows Gen2". The "Microsoft Fabric" service in the cloud cannot reach the server directly. Which component must be installed and configured so that the connection can reach the on-premises database?
- AAn on-premises data gateway installed on a machine inside the company network, registered to the tenant and bound to the connection. Correct
- BA cloud connection defined in the "Microsoft Fabric" portal, which routes the query to the private server using the engineer's stored organisational account credentials.
- CA virtual network data gateway provisioned in the tenant, which peers with the on-premises subnet and forwards each query to the local SQL Server instance.
- DA personal gateway in standard mode shared across the workspace, which lets every workspace member reuse one connection to the local SQL Server instance.
Why A is correct: The on-premises data gateway runs inside the private network and relays queries between the cloud service and the local server, which is exactly the bridge a non-public source requires.
Why B is wrong: A cloud connection only reaches sources that already have a public or service endpoint, so it cannot by itself bridge into a private on-premises network that the service cannot see.
Why C is wrong: A virtual network data gateway reaches sources inside an Azure virtual network, not a physical on-premises data centre, so it does not bridge to a server with no cloud presence.
Why D is wrong: The personal mode gateway is single-user and cannot be shared across a workspace, so it is the wrong gateway type for a team ingestion pipeline.