Exam AZ-700 topic 2 question 49 discussion

why not 1 and 1? VMSS itself can be a backend target and not the 4 VM's making the VMSS. Certificate can come from Key Vault.

correct answer 1 & 1

Certificates: 1 - which will be added to the listener (https://learn.microsoft.com/en-us/azure/application-gateway/configuration-listeners#protocol) Backend pools: 1 - a VMSS can be added as-is to a pool. More details: https://stackoverflow.com/questions/77320073/azure-issue-adding-vm-scale-set-flexible-orchestration-as-application-gateway

1 [VMSS] & 1 [Minimize the number of targets in the backend pool of AG1]]

Tested the number of pool targets VMSS1 - Virtual machine scale set [2 VMs] VMSS1_0cd18cd5 10.20.2.5 VMSS1_b52baa23 10.20.2.4 IP address or FQDN : 10.20.2.4 IP address or FQDN : 10.20.2.5 Virtual machine : Vnet2-nic01-9395c435 (10.20.2.4) Virtual machine : Vnet2-nic01-d393ec3f (10.20.2.5) Target type : VMSS Target : No available items VMSS it's not possible to be added as a target in backend pool The first test was with a VMSS of four VMs. I added VMSS1 as a target for backend pool of an AppWebGw (created during VMSS). I was surprised to see all 4 VMs listed as a target. I was exepected to see VMSS1. So I deleted the VMs and tried to add VMSS but was not possible: there was no VMSS listed. So the most probable response is: we need 4 backend pool targets (all 4 VMs)

Correct answer is 1-1

Yep 1 and 1 1- VMSS is eligible to be a backend pool target 1- Key vault for cert management and provisioning - Remember App GWY V1 is NOT key vault integrated Also need to configure SSL profile and associate with listener and hence https/TLS connections are terminated at App GWY and not app services

Correct answer 1-1