Exam AZ-500 All Questions

View all questions & answers for the AZ-500 exam

Exam AZ-500 topic 4 question 101 discussion

Actual exam question from Microsoft's AZ-500

Question #: 101
Topic #: 4

You have an Azure subscription.

You create a new virtual network named VNet1.

You plan to deploy an Azure web app named App1 that will use VNet1 and will be reachable by using private IP addresses. The solution must support inbound and outbound network traffic.

What should you do?

A. Create an Azure App Service Hybrid Connection.
B. Create an Azure application gateway.
C. Create an App Service Environment.
D. Configure regional virtual network integration.

Show Suggested Answer

Suggested Answer: C 🗳️

by Cock at May 19, 2023, 1:51 a.m.

Comments

Submit Cancel

randy0077

4 months, 3 weeks ago

Selected Answer: C

https://learn.microsoft.com/en-us/azure/app-service/overview-vnet-integration#:~:text=The%20virtual%20network,inbound%20private%20access.

upvoted 1 times

...

randy0077

4 months, 3 weeks ago

Selected Answer: C

Sry c is correct ans.

upvoted 1 times

...

randy0077

4 months, 3 weeks ago

Selected Answer: D

c is expensive more suitable for isolated network. D is correct ans.

upvoted 1 times

...

golitech

6 months, 1 week ago

Selected Answer: C

Option C: Create an App Service Environment (ASE) An App Service Environment (ASE) is a fully isolated, highly scalable, and runs your app in a customer's virtual network. It allows you to deploy web apps with private IP addresses and supports both inbound and outbound network traffic. This solution ensures that your app is fully integrated with the VNet, making it reachable over private IP addresses and providing full network isolation. This option is the most appropriate solution to meet the requirement of having your app accessible via private IP addresses and supporting the required inbound/outbound network traffic.

upvoted 1 times

randy0077

4 months, 3 weeks ago

is this chat gpt copy paste.

upvoted 2 times

...

ITFranz

1 year, 1 month ago

To support the answer. https://learn.microsoft.com/en-us/azure/app-service/environment/overview Answer = C

upvoted 2 times

...

epomatti

1 year, 7 months ago

Selected Answer: C

App Service Environment is the only available option that supports private Inbound connection. Another option would be Private Endpoints but it is not for choice. VNET integration allows App Service to connect OUTBOUND only to resources in the VNET, so option D cannot be the correct answer.

upvoted 3 times

...

Self_Study

2 years ago

Selected Answer: C

On an exam on 7/8/23, agree with the answer provided.

upvoted 4 times

...

Alexbz

2 years, 2 months ago

Selected Answer: C

C is correct.

upvoted 2 times

...

xcapell

2 years, 2 months ago

Selected Answer: D

Option "D". You need to integrate App with Azure VNET https://learn.microsoft.com/en-us/azure/app-service/overview-vnet-integration

upvoted 2 times

pentium75

1 year ago

"Virtual network integration gives your app access to resources in your virtual network, but it doesn't grant inbound private access to your app from the virtual network. Private site access refers to making an app accessible only from a private network, such as from within an Azure virtual network. Virtual network integration is used only to make outbound calls from your app into your virtual network. Refer to private endpoint for inbound private access."

upvoted 1 times

...

TheProfessor

1 year, 10 months ago

If your app is in an App Service Environment, it's already integrated with a virtual network and doesn't require you to configure virtual network integration feature to reach resources in the same virtual network.

upvoted 2 times

lt9898

1 year, 9 months ago

I'm confused about why most are favouring C over D. It seems that if option D is combined with PrivateLink can be the more optimal and cost effective choice if you do not require your own AppService instance as an ASE deployment, then have to worry about maintaining the deployment. See this example for regional vNet integration plus privatelink https://learn.microsoft.com/en-us/azure/architecture/example-scenario/security/hardened-web-app Can someone clarify the reasons why one would select to go the ASE route over this above? Is everyone disagreeing with this because D does not say "vNet integration plus privatelink" and vNet integration is only for egress out of AppService?

upvoted 1 times

pentium75

1 year ago

We need private inbound access, but "virtual network integration gives your app access to resources in your virtual network, but it doesn't grant inbound private access to your app from the virtual network. Private site access refers to making an app accessible only from a private network, such as from within an Azure virtual network. Virtual network integration is used only to make outbound calls from your app into your virtual network. Refer to private endpoint for inbound private access."

upvoted 1 times

...

billo79152718

2 years, 2 months ago

C is correct. https://learn.microsoft.com/en-us/azure/app-service/environment/overview

upvoted 4 times

ITTesters

2 years, 1 month ago

Indeed, C is correct: https://learn.microsoft.com/en-us/azure/app-service/environment/overview#feature-differences "There are no networking dependencies on the customer's virtual network. You can secure all inbound and outbound traffic and route outbound traffic as you want."

upvoted 3 times

...

Cock

2 years, 2 months ago

Selected Answer: C

By creating an ASE, you can deploy App1 and configure it to use VNet1, which will allow the app to use private IP addresses and support inbound and outbound network traffic.

upvoted 4 times

...