Exam AZ-700 topic 2 question 19 discussion

YYN Y / https://docs.microsoft.com/en-us/azure/app-service/overview-vnet-integration#limitations Y / VNet integrated App Service uses IP from dedicated subnet to communicate resources in the VNet. ( vNet integration : outbound / private endpoint : inbound ) https://docs.microsoft.com/en-us/azure/app-service/overview-vnet-integration#how-regional-virtual-network-integration-works N / There's no private endpoint.

Correct Answer is: YYN 1) Subnet2 is delegated to ASP. 2) Virtual network integration gives your app access to resources in your virtual network, but it doesn't grant inbound private access to your app from the virtual network. Private site access refers to making an app accessible only from a private network, such as from within an Azure virtual network. Virtual network integration is used only to make outbound calls from your app into your virtual network. https://learn.microsoft.com/en-us/azure/app-service/overview-vnet-integration#gateway-required-vnet-integration:~:text=Virtual%20network%20integration%20gives%20your%20app%20access%20to%20resources%20in,make%20outbound%20calls%20from%20your%20app%20into%20your%20virtual%20network. 3) There is no Private Endpoint configured and again VNET integration only allows outbound network communication, no inbound communication is allowed.

the third answer is N, as per microsofts documentation "Virtual network integration gives your app access to resources in your virtual network, but it doesn't grant inbound private access to your app from the virtual network. Private site access refers to making an app accessible only from a private network, such as from within an Azure virtual network. Virtual network integration is used only to make outbound calls from your app into your virtual network. Refer to private endpoint for inbound private access." https://learn.microsoft.com/en-us/azure/app-service/overview-vnet-integration

Y - It is limited to the service plan (delegate) N - Only outbound calls to resources in the VNet will use a private IP. I define the words 'network communication' as 'all communication', which will not use a derived private IP. Y - Computer is in the same VNet, so outbound calls will use a private IP from the subnet

YYN are the correct answers. App will use private IP from the vnet-intergration subnet for outbound calls.

YYN is the correct

Y - Subnet2 is delegated to ASP N - Network comunication (IN/OUT). Only Out is possible! Y - APP goes out, and presents to VMs or ourthes devics on the network with the "From IP". An IP from the delegated subnet. So VM connects back to the IP in private IP of the subnet

YNN, a Subnet is delegated to an App service plan. without PE it wouldn‘t use the internal IPs from the VNet.

YYN 1,2)Uses ip from the subnet only for outbound connectivity 3 Uses ip from the subnet only for outbound connectivity

YYN 1) it's one subnet one app sp 2) AP service will use IP from integration vnet for communication but just for outbound connection (and responses back, but traffic have to be initiated by App service) 3) N - because if you need inbound traffic - so clients would like to reach app service first - then you need private endpoint which has not been configured in our example

3)Ans: N Explanation: Private Endpoint is only used for incoming flows to your Web App. Outgoing flows won't use this Private Endpoint. You can inject outgoing flows to your network in a different subnet through the virtual network integration feature. Since there is no private endpoint configured for the app service, the VMs in the same vnet cannot reach the app service. So, the correct statement would be; Computers in Vnet1 will connect to a private IP address when they connect to as12 "when there is a private endpoint for the app created on Vnet1" https://learn.microsoft.com/en-us/azure/app-service/networking/private-endpoint#conceptual-overview

YNN The inbound rules don't apply because>>> you can't use virtual network integration to provide inbound access to your app.

YNN. You can have only 1 subnet per APP service plan. You don't have a PE defined. You don't have a PE defined.