Exam AZ-104 All Questions

View all questions & answers for the AZ-104 exam

Exam AZ-104 topic 4 question 104 discussion

Actual exam question from Microsoft's AZ-104

Question #: 104
Topic #: 4

HOTSPOT
-

You have an Azure subscription that contains the virtual networks shown in the following table.

The subscription contains the virtual machines shown in the following table.

The subscription contains the Azure App Service web apps shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by SamCook101 at Dec. 29, 2023, 6:17 p.m.

Comments

Submit Cancel

Alandt

Highly Voted 1 year, 7 months ago

GitHub Copilot webapp1 can communicate with vm2: Yes Explanation: webapp1 is integrated with vnet1 and vnet1 is peered with vnet2, which vm2 is connected to. So, webapp1 can communicate with vm2. nsg1 controls inbound traffic to webapp1: No Explanation: nsg1 is associated with subnet1, not directly with webapp1. It controls the inbound traffic to the subnet1, not to the webapp1. webapp2 can communicate with vm1: Yes Explanation: webapp2 is deployed to subnet2 and subnet2 is in vnet2. vnet2 is peered with vnet1, which vm1 is connected to. So, webapp2 can communicate with vm1.

upvoted 24 times

ozansenturk

7 months, 2 weeks ago

YNY App Service virtual network integration enables your app to make outbound requests into an Azure virtual network. The virtual network integration feature enables you to place the back end of your app in a subnet in a Resource Manager virtual network. The virtual network must be in the same region as your app. This feature isn't available from an App Service Environment, which is already in a virtual network. Use cases for this feature: Access resources in Resource Manager virtual networks in the same region. Access resources in peered virtual networks, including cross region connections. https://learn.microsoft.com/en-us/azure/app-service/networking-features

upvoted 2 times

...

arr73

Highly Voted 1 year, 7 months ago

YNN Point 1: Yes: Using virtual network integration enables your app to access: Resources in the virtual network you're integrated with. Resources in virtual networks peered to the virtual network your app is integrated with including global peering connections. Point 2: NO: Virtual network integration is used only to make outbound calls from your app into your virtual network Point 3: NO: There are some limitations with using virtual network integration: The feature isn't available for Isolated plan apps in an App Service Environment Reference: https://learn.microsoft.com/en-us/azure/app-service/overview-vnet-integration

upvoted 24 times

SDiwan

1 year, 6 months ago

Your 3rd answer is wrong. It shoudl be "YES". Isolated apps does not need vnet intergation feature bcoz it is a Network-isolated application hosting , meaning the app is deployed into a subnet, which is inside vnet in this question. Since there is peering between vnet1 and vnet2, the app can communicate with a VM in the other vnet.

upvoted 8 times

SDiwan

1 year, 6 months ago

Your 3rd answer is wrong. It shoudl be "YES". Isolated apps does not need vnet intergation feature bcoz it the app already has Network-isolated application hosting , meaning the app is deployed into a subnet, which is inside vnet2 in this question. Since there is peering between vnet1 and vnet2, the app can communicate with a VM in the other vnet1.

upvoted 1 times

...

flamingo23

1 year, 6 months ago

In your link under limitations, we have " You can't reach resources across peering connections with classic virtual networks". So I think for the first question 'N'. We cannot peer if the other vm is also virtually integrated.

upvoted 1 times

flamingo23

1 year, 6 months ago

Sorry typo - other vm is also NOT virtually integrated.

upvoted 1 times

...

Aitorcd92

Most Recent 1 month, 2 weeks ago

Y-N-Y The last statement "WebApp2 can communicate with VM1" should be Yes, and here is why: WebApp2 is deployed in Subnet2 of VNet2 using the Isolated tier, which means it is integrated directly into the VNet. VNet2 has a peering connection with VNet1 (where VM1 is located). Peering connections in Azure are bidirectional, enabling resources in VNet2 to communicate with resources in VNet1 unless explicit NSG rules or UDRs block the traffic. There is no mention in the question of any NSG rule that denies this communication. Therefore, by default, traffic between WebApp2 and VM1 over the peered VNets is allowed. This is why the correct answer for the last statement is Yes.

upvoted 1 times

...

vrm1358

5 months ago

YNY my two cents on the last question: WebApp2 is on an Isolated Service Plan. Isolated tier used App Service Environment service feature. ASE does not need a vnet integration to be able to talk to a Vnet. It simply runs on a Vnet and can use it to access resources and expose your app in your vnet. ref: https://azure.microsoft.com/en-us/pricing/details/app-service/windows/?msockid=02fe20c15a3360fc347f34cf5b696103 https://learn.microsoft.com/en-us/azure/app-service/networking-features

upvoted 1 times

...

examprepboy

10 months, 2 weeks ago

Answer is YNY. Network is peered so webapp2 can connect to resources. The link refers to classic virtual networks

upvoted 1 times

...

pet3r

12 months ago

The virtual network integration feature: Requires a supported Basic or Standard, Premium, Premium v2, Premium v3, or Elastic Premium App Service pricing tier. https://learn.microsoft.com/en-us/azure/app-service/overview-vnet-integration YNN

upvoted 1 times

...

Ni22

1 year, 1 month ago

6/13/24 on exam

upvoted 8 times

...

WeepingMaplte

1 year, 3 months ago

Reference to why NSG does control inbound traffic. Virtual network integration feature is used to access other Azure resources in the VNet. https://learn.microsoft.com/en-us/azure/app-service/overview-vnet-integration#manage-virtual-network-integration:~:text=Network%20security%20groups%20(NSGs)

upvoted 2 times

...

1828b9d

1 year, 5 months ago

This question was in exam 01/03/2024

upvoted 8 times

...

[Removed]

1 year, 7 months ago

Agree with YNY, the Isolated tier only means that the Web App is hosted in a private, dedicated Azure environment rather than sharing the runtime environment with other customers (for shared plans) or dedicated which is running on... well... dedicated VM instances.

upvoted 6 times

[Removed]

1 year, 7 months ago

So running Isolated plans for WebApps does not necessarily mean these are isolated from other resources by default.

upvoted 1 times

flamingo23

1 year, 6 months ago

In the link under limitations, we have " You can't reach resources across peering connections with classic virtual networks". So I think for the first question 'N'. We cannot peer if the other vm is also virtually integrated. https://learn.microsoft.com/en-us/azure/app-service/overview-vnet-integration So I think it is NNN

upvoted 1 times

MatAlves

1 year, 5 months ago

This refers specifically (and only) to CLASSIC VIRTUAL NETWORKS. "On 31 August 2024, five Azure classic networking services will be retired and no longer supported: classic Virtual Network, reserved IP addresses, Azure ExpressRoute gateway, classic Application Gateway, and classic VPN Gateway." https://learn.microsoft.com/en-us/answers/questions/784849/retirement-announcement-migrate-your-classic-netwo

upvoted 1 times

...

learnboy123

1 year, 7 months ago

YNY check https://learn.microsoft.com/en-us/azure/app-service/overview-vnet-integration

upvoted 8 times

...

SamCook101

1 year, 7 months ago

YNN......

upvoted 1 times

...