exam questions

Exam AZ-700 All Questions

View all questions & answers for the AZ-700 exam

Exam AZ-700 topic 5 question 4 discussion

Actual exam question from Microsoft's AZ-700
Question #: 4
Topic #: 5
[All AZ-700 Questions]

You have an Azure virtual network named Vnet1 that has one subnet. Vnet1 is in the West Europe region.
You deploy an Azure App Service app named App1 to the West Europe region.
You need to provide App1 with access to the resources in Vnet1. The solution must minimize costs.
What should you do first?

  • A. Create a private link.
  • B. Create a new subnet.
  • C. Create a NAT gateway.
  • D. Create a gateway subnet and deploy a virtual network gateway.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
christianpageqc
Highly Voted 2 years, 1 month ago
I think answer should be B. Create a new subnet, since both Vnet and App Service are in the same region. https://docs.microsoft.com/en-us/azure/app-service/web-sites-integrate-with-vnet#enable-vnet-integration Regional VNet Integration = "If the VNet is in the same region, either create a new subnet or select an empty pre-existing subnet"
upvoted 86 times
Bharat
2 years ago
You are correct. Thanks for the reference link.
upvoted 6 times
...
...
dpinlaguna
Highly Voted 2 years, 1 month ago
I think it should be B since resources are in the same region (Regional VNet Integration), new subnet does not incur cost. The VPN Gateway solution incurs a cost (Gateway-required VNet Integration...When you connect directly to VNet in other regions or to a classic virtual network in the same region, you need an Azure Virtual Network gateway provisioned in the target VNet.)
upvoted 8 times
RandomUser
2 years ago
But don't forget VNet integration is only available from Premium onwards. That might also be quite an increase in cost.
upvoted 2 times
...
...
breakpoint0815
Most Recent 7 months, 2 weeks ago
Selected Answer: B
Answer D suggests creating a gateway subnet and deploying a virtual network gateway, which is used for connecting virtual networks across different regions or connecting to on-premises networks. While it would provide access to resources in Vnet1, it would incur additional costs and is not necessary for connecting an App Service app to a virtual network in the same region. Therefore, creating a new subnet (answer B) is the correct and more cost-effective solution in this scenario.
upvoted 1 times
...
samir111
8 months, 4 weeks ago
B should be the answer
upvoted 1 times
...
ragav21
1 year ago
Selected Answer: B
B should be the right answer
upvoted 1 times
...
sapien45
1 year, 1 month ago
Selected Answer: B
Virtual network integration gives your app access to resources in your virtual network, but it doesn't grant inbound private access to your app from the virtual network. Private site access refers to making an app accessible only from a private network, such as from within an Azure virtual network. Virtual network integration is used only to make outbound calls from your app into your virtual network. Regional virtual network integration: When you connect to virtual networks in the same region, you must have a dedicated subnet in the virtual network you're integrating with. The virtual network integration feature: Requires a supported Basic or Standard, Premium, Premium v2, Premium v3, or Elastic Premium App Service pricing tier.
upvoted 3 times
...
wetraining123
1 year, 2 months ago
it should be B. Create a subnet and Integrate it with the App1
upvoted 1 times
Pradh
1 year, 1 month ago
existing subnet already seems empty. why need new subnet ?
upvoted 1 times
...
...
Jamesat
1 year, 2 months ago
Selected Answer: B
B is correct as the resources are in the same region. Why would you even think about a VPN gateway? Odd answer. Exam Topics should review this one!
upvoted 1 times
...
Goseu
1 year, 3 months ago
Selected Answer: B
Answer is B
upvoted 2 times
...
rac_sp
1 year, 4 months ago
Selected Answer: B
create a new subnet because both resources are in the same region, no need to a gateway that is only required when resources are in different regions.
upvoted 6 times
Pradh
1 year, 1 month ago
existing subnet already seems empty. why need new subnet ?
upvoted 1 times
...
...
rac_sp
1 year, 4 months ago
Selected Answer: B
In the same region there is no need of a Virtual Network Gateway
upvoted 3 times
...
zerocool114
1 year, 4 months ago
on exam today, answer B
upvoted 1 times
...
unclegrandfather
1 year, 4 months ago
Appeared on exam Jun/28/22
upvoted 2 times
...
kinder2
1 year, 4 months ago
Selected Answer: B
"B" Regional virtual network integration supports connecting to a virtual network in the same region and doesn't require a gateway. https://docs.microsoft.com/en-us/azure/app-service/overview-vnet-integration#regional-virtual-network-integration
upvoted 2 times
Pradh
1 year, 1 month ago
existing subnet already seems empty. why need new subnet ?
upvoted 1 times
...
...
borekbp
1 year, 8 months ago
but there is info in question that you have already one subnet, can we use it for gateway or vnet-integration? why create new one?
upvoted 1 times
Payday123
1 year, 4 months ago
Because we need to provide access to resources in this one subnet. If this subnet is integrated with App Service we will not be able to create any other resources
upvoted 1 times
...
...
rockethack
1 year, 8 months ago
This question was on the exam on 18th Feb 2022.
upvoted 1 times
...
nitinkumarmca
1 year, 9 months ago
Selected Answer: B
Subnet as it doesn't incur additional cost. VPN Gateway is required for cross region integration or Classic VNET in same region.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago