Exam AZ-700 topic 2 question 8 discussion

Given answer is correct. Existing subnet space spans the entire address space of vnet, so it needs to be modified. Cross region vnet integration requires a vpn gateway and a point to site vpn connection. So you need to add the gateway, then configure the p2s to add address space. https://docs.microsoft.com/en-us/azure/app-service/overview-vnet-integration#gateway-required-vnet-integration

Answer is correct, it talks about cross region vent integration. Service endpoint is for regional or same region virtual network integration. Private endpoint is to use private DNS integration.

Given answer is correct as per tis link considering both vnet and App service in different regions and hence vnet integration is NOT applicable here https://learn.microsoft.com/en-us/azure/app-service/configure-gateway-required-vnet-integration

It is the correct answer. We need to modify the address space of vnet 1 because we need a dedicated subnet to deploy a vpn gateway. Then we deploy the vpn gateway and configure point the site vpn. web app to the vnet vpn connection because the Vnet1 and Webapp are in different regions.

The provided link https://docs.microsoft.com/en-us/azure/app-service/overview-vnet-integration#gateway-required-vnet-integratio seems not to mention VPN? Is the question outdated?

Guy's any video is available to this problem?

I tested in the lab, and when attempting to add vNet integration to the App Service, the Portal menu allows same region automatically, but it shows "Other regions (requires a Virtual Network Gateway configured with Point to Site VPN).

The virtual network integration feature has two variations: 1) Since you need to deploy a VNET Gateway, address space need to be modified, currently subnet is consuming entire address space. 2) You must a deploy a VPN Gateway, since Web App and VNet are in different regions. a. Regional virtual network integration: When you connect to virtual networks in the same region, you must have a dedicated subnet in the virtual network you're integrating with. b. Gateway-required virtual network integration: When you connect directly to virtual networks in other regions or to a classic virtual network in the same region, you need an Azure Virtual Network gateway created in the target virtual network. 3) Requires a virtual network route-based gateway configured with an SSTP point-to-site VPN before it can be connected to an app.

Correct Gateway-required virtual network integration supports connecting to a virtual network in another region or to a classic virtual network. Gateway-required virtual network integration: Requires a virtual network route-based gateway configured with an SSTP point-to-site VPN before it can be connected to an app. https://docs.microsoft.com/en-us/azure/app-service/overview-vnet-integration#gateway-required-virtual-network-integration

If you look at the resources locations, both of them are on a different region. So Service and Private is out of the picture. Must prioritize VPN connectivity first.

Remember: Modify the VNET so you can add the VPN. Add the VPN. Then configure it.

Appeared on exam 6/28/22

The mentioned answer is correct, https://docs.microsoft.com/en-us/azure/app-service/overview-vnet-integration.

the answer is 413, this question will not use vpn services

Answers are correct. Check the link below https://docs.microsoft.com/en-us/azure/app-service/overview-vnet-integration

The answers are correct. Virtual network integration doesn't enable your apps to be accessed privately.

on exam 1/6/2022