Exam AZ-104 topic 5 question 14 discussion

I think the answer should be C. <https://docs.microsoft.com/en-us/azure/app-service/web-sites-integrate-with-vnet>

Answer is wrong. It should be "C" Connect the webapp to VNET using webapp VNET integration. where webapp can access the resources in the VNET.

on exam 1/4/2025

In this context "Connet webapp1 to vNet" indicates "enable vNet Integration" when creating VM, this will allow for the VM to visit the resources in the vNet. By default, your app is open to the internet and cannot reach into a vNet. However, you can enable vNet Integration such that your web app can reach into a vNet. When enabling vNet Integration, you need assign one subnet within that vNet to the VM whereby you can put NSG or route tables on this subnet to control outbound traffic.

C is correct

Answer D You need to acces the MySQL database, not to integrate webapp1 in VNET1.

so simple question, why do they provide incorrect answer?

You can simply create a new subnet within the same vNET and connect the webapp to it. There's no need to make the solution complex by involving Application Gateway here.

Answer is Connect webapp1 to VNET1 The VNet Integration feature has two variations: - Regional VNet Integration: When you connect to Azure Resource Manager virtual networks in the same region, you must have a dedicated subnet in the VNet you're integrating with. - Gateway-required VNet Integration: When you connect to VNet in other regions or to a classic virtual network in the same region, you need an Azure Virtual Network gateway provisioned in the target VNet. Note: If the VNet is in the same region, either create a new subnet or select an empty preexisting subnet. The resources inside a VNet can communicate. Reference: https://docs.microsoft.com/en-us/azure/app-service/web-sites-integrate-with-vnet

The best approach to enable webapp1 to access the data hosted on VM1 in this scenario would be to establish a secure and direct connection between the web app and the virtual machine without involving Azure Application Gateway.

I think the web app is a PaaS service so it has a public IP so either we use private link or Azure Application Gateway

c is the correct answer

the best answer is D.... application gateway would provide a perfect option for webapp to connect to your resources, such as virtual machines or storage accounts. Connecting web app to a VNET requires specific subnet creation and few other items and consideration. It would not be my first choice if it is my own network. but it would definitely doable. https://learn.microsoft.com/en-us/azure/application-gateway/overview

The correct answer is C. Connect webapp1 to VNET1. By connecting the web app to the virtual network, you can enable access from the web app to resources on the virtual network, including the MySQL database hosted on VM1. This can be done by enabling VNet Integration for the web app and then selecting VNET1 as the virtual network to integrate with. Once the integration is set up, the web app will be able to communicate with VM1 on VNET1 as if it were on the same network. Option A, deploying an internal load balancer, is not necessary in this scenario, as load balancing is not required. Option B, peering VNET1 to another virtual network, is also not necessary for this scenario, as it does not address the requirement to enable communication between the web app and the MySQL database hosted on VM1. Option D, deploying an Azure Application Gateway, is not necessary for this scenario, as it is primarily used for load balancing and routing of HTTP/HTTPS traffic. It does not address the requirement to enable communication between the web app and the MySQL database hosted on VM1.

C "Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications."

C is the correct answer. By connecting webapp1 to VNET1 (answer C), the web app will be able to access the data hosted on VM1 through the virtual network. The other options do not directly address the requirement to allow webapp1 access to the data hosted on VM1. An internal load balancer and a peered virtual network may provide other benefits, but they would not by themselves ensure that webapp1 can access the data hosted on VM1. An Azure Application Gateway is a reverse proxy that is often used for load balancing, SSL termination, and URL-based routing, but it would not directly allow webapp1 to access the data hosted on VM1.

Corect Answer C: C. Connect webapp1 to VNET1 "The App Service virtual network integration feature enables your apps to access resources in or through a virtual network." https://learn.microsoft.com/en-us/azure/app-service/overview-vnet-integration D. Deploy an Azure Application Gateway "Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications." see here: https://learn.microsoft.com/en-us/azure/application-gateway/overview