Exam AZ-301 All Questions

View all questions & answers for the AZ-301 exam

Exam AZ-301 topic 6 question 17 discussion

Actual exam question from Microsoft's AZ-301

Question #: 17
Topic #: 6

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are designing an Azure solution for a company that wants to move a .NET Core web application from an on-premises data center to Azure. The web application relies on a Microsoft SQL Server 2016 database on Windows Server 2016. The database server will not move to Azure.
A separate networking team is responsible for configuring network permissions.
The company uses Azure ExpressRoute and has an ExpressRoute gateway connected to an Azure virtual network named VNET1.
You need to recommend a solution for deploying the web application.
Solution: Deploy the web application to a web app hosted in an isolated App Service plan on VNET1.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️
Instead, use VNet Integration.
Note: VNet Integration gives your web app access to resources in your virtual network. VNet Integration is often used to enable access from apps to a databases and web services running in your VNet.
References:
https://docs.microsoft.com/en-us/azure/app-service/web-sites-integrate-with-vnet

by kewl at Dec. 14, 2019, 4:53 a.m.

Comments

Submit Cancel

kewl

Highly Voted 5 years, 6 months ago

Answer should be Yes. If you deploy the ASE in a virtual network that has a VPN connection to the on-premises network, the apps in the ASE can access the on-premises resources. This capability is true regardless of whether the VPN is a site-to-site or Azure ExpressRoute VPN. https://docs.microsoft.com/en-us/azure/app-service/environment/intro#virtual-network-support

upvoted 18 times

onlyfunmails

5 years, 5 months ago

I guess, If solution specifies, isolated ASE will be same VNET or peered VNET, then YES. It just mentioned about isolated ASE, can be any VNET which might not have integration with VNET with gateway connection to on-premise.

upvoted 1 times

tartar

4 years, 9 months ago

A is ok

upvoted 3 times

...

Jinder

4 years, 5 months ago

The answer will be No. Refer to below copy-pasted from the link: The VNet Integration features: Require a Standard, Premium, PremiumV2, PremiumV3, or Elastic Premium pricing plan. (https://docs.microsoft.com/en-us/azure/app-service/web-sites-integrate-with-vnet) Isolated is not supported. Needs VNET integration.

upvoted 2 times

...

ice3d

Highly Voted 5 years, 4 months ago

Should be YES: "The gateway required VNet Integration feature doesn't integrate an app with a VNet that has an ExpressRoute Gateway. Even if the ExpressRoute Gateway is configured in coexistence mode the VNet Integration doesn't work. If you need to access resources through an ExpressRoute connection, then you can use the regional VNet Integration feature or an App Service Environment, which runs in your VNet." https://docs.microsoft.com/en-us/azure/app-service/web-sites-integrate-with-vnet#accessing-on-premises-resources

upvoted 12 times

...

azurecert2021

Most Recent 4 years, 4 months ago

given answer is correct answer should be No first it is express route so we have to use regional vnet integration You can't use gateway-required VNet Integration: With a VNet connected with Azure ExpressRoute. on the below link it is mentioned 2 time isolated is not supported 1) There are some limitations with using VNet Integration with VNets in the same region: The feature can't be used by Isolated plan apps that are in an App Service Environment. 2) The VNet Integration features: Require a Standard, Premium, PremiumV2, PremiumV3, or Elastic Premium pricing plan. and there is no information mentioned about the region as well ,but it does not matter we dont have option over express route for different region vent integration with current availabe option.https://docs.microsoft.com/en-us/azure/app-service/web-sites-integrate-with-vnet

upvoted 2 times

...

glam

4 years, 4 months ago

A. Yes

upvoted 1 times

...

Anz111

4 years, 5 months ago

Web app with Vnet integration or Web app deployed in ASE in the same vnet will be able to reach one prem. A:yes for this question as well. But it is much more expensive.

upvoted 3 times

...

sanketshah

4 years, 5 months ago

A is correct.

upvoted 1 times

...

Mcrane86

4 years, 12 months ago

should be yes.vnet integration is allowed on std, prem and isolated plans https://azure.microsoft.com/en-us/pricing/details/app-service/plans/

upvoted 8 times

...

MoniqueArduin

5 years, 1 month ago

For Azure App Service, a new version of the VNet Integration capability enables access to resources across service endpoints or Azure ExpressRoute connections. References: https://azure.microsoft.com/en-us/updates/new-app-service-vnet-integration-feature/

upvoted 3 times

...

AmineHZ

5 years, 1 month ago

answer should be YES

upvoted 3 times

...

kp7

5 years, 2 months ago

VNet Integration doesn't enable access to resources available across Azure ExpressRoute connections or works with service endpoints.

upvoted 1 times

...

rafapaz09

5 years, 4 months ago

Should be Yes "If your app is in App Service Environment, then it's already in a VNet and doesn't require use of the VNet Integration feature to reach resources in the same VNet" https://docs.microsoft.com/en-us/azure/app-service/web-sites-integrate-with-vnet

upvoted 5 times

...

Ekramy_Elnaggar

5 years, 5 months ago

Answer is certainly YES

upvoted 8 times

...