Exam AZ-300 topic 12 question 1 discussion

So the correct answer is ( Isolated & Always ON )

Isolated and Standard both support Always On feature but, in order to fulfil the requirement - "The cost of App1 and App2 must be minimized", the choice has to be Standard. Isolated app service tier is the most expensive!

Given answer is right

Given answer is right

if you want to Put App directly to Vnet then Only through Isolation App service plan is providing option for networking while you are creating webapp.

Requirement "App2 must be able to connect directly to the private IP addresses of the Azure virtual machines. App2 will be deployed directly to an Azure virtual network." From MS - https://docs.microsoft.com/en-us/azure/app-service/environment/intro An ASE always exists in a virtual network, and more precisely, within a subnet of a virtual network. An ASE can be either internet-facing with a public IP address or internal-facing with only an Azure internal load balancer (ILB) address. From MS The Isolated plan allows customers to run their apps in a private, dedicated environment in an Azure data centre using Dv2-series VMs with faster processors, SSD storage and double the memory-to-core ratio compared to Standard. There is no such requirement for dedicated ASE. Basic and standard has "Always On" feature which is required here. So correct answer is "Standard"

Answer: - Isolate - Always On Explanation: The Tricky question here is: deployed directly to an Azure virtual network... The only way to do it is in an ASE, Ase needs an Isolate tier. * The cost of App1 and App2 must be minimized: The Plans Free, Shared and Basic haven’t Virtual Network connectivity, so we only have Standard, Premium and Isolate that support it. Therefore Standard the cheaper, Premium and Isolated app service tier is the more expensive, But only Isolate is able to deploy in a VN. * Connection Private on a VM and deployed directly to an Azure virtual network: An ASE always exists in a virtual network, and more precisely, within a subnet of a virtual network. You can use the security features of virtual networks to control inbound and outbound network communications for your apps. So we’ll need Isolate to use ASE. References: https://azure.microsoft.com/en-us/pricing/details/app-service/plans/ https://docs.microsoft.com/en-us/azure/app-service/environment/intro#virtual-network-support

az func in a vnet > app service plan (not consumption nor prenium) optimize cost > standard (not isolated) warm up > in a app serv plan must use always on

app2 req:/considerations: App2 must be able to connect directly to the private IP addresses of the Azure virtual machines. App2 will be deployed directly to an Azure virtual network. The cost of App1 and App2 must be minimized. A newly developed API must be implemented as an Azure function named App2. App2 will use a blob storage trigger. App2 must process new blobs immediately. ===> App service plan tier- standard ( answers all requirements: immediate processing--> production, API support, lower cost, connection to vnet,..) enable feature--> always on (needs to be on to be triggered??)

Answer is Incorrect. 1 - Isolated (you need App Service Environment -within VNET/lock using NSGs- there can't be more hints) 2 - Always On (App 2 is a function; functions deployed on App Service Plans need Always on) Cost factors, as many have mentioned, should only come in when there are multiple correct answers, which does not apply here.

MS documentation does not leave much room for confusion: "There are two primary deployment types for the Azure App Service. There is the multi-tenant public service, which hosts App Service plans in the Free, Shared, Basic, Standard, Premium, and Premiumv2 pricing SKUs. Then there is the single tenant App Service Environment(ASE), which hosts Isolated SKU App Service plans directly in your Azure Virtual Network (VNet)". Thus, ISOLATED = deployment directly on VNet, which is a requirement, which means that the answer given is INCORRECT! It does make sense because since, in the other plans, you'd be on a shared instance, you wouldn't be in position to decide on which VNet the app will be available. Autoswap is a feature that allows setting up staging environments for the deployments of App updates and Webjobs refer to background jobs to be run by the App. Therefore, unrelated to the requirements. What it is required is for the App to process the Blobs immediately and this cannot be met if the App is put to sleep (it takes some time to wake up). Always On it is then.

Given answer is correct. VNET integration is also available for Standard plans https://azure.microsoft.com/en-us/pricing/details/app-service/plans/

ASEv2 includes upgraded VMs that are used to host your apps. The workers for ASEv2 are built on the Dv2-series VMs and outperform the workers used in the multi-tenant app service. To distinguish between ASPs that are in an ASE and those in the multi-tenant service, a new pricing SKU was created. The name of this SKU is Isolated, as shown in Figure 4. When you pick an Isolated SKU it means you want the associated ASP to be created in an ASEv2. Answer is Isolated . VNet integration is not the same as ASE, you need ASE to meet the requirements. https://docs.microsoft.com/en-us/archive/msdn-magazine/2017/april/azure-the-new-azure-app-service-environment

Given answer is correct. Application Requirements - A newly developed API must be implemented as an Azure function named App2. App2 will use a blob storage trigger. App2 must process new blobs immediately. A - Always On App2 must be able to connect directly to the private IP addresses of the Azure virtual machines. App2 will be deployed directly to an Azure virtual network. Vnet Integration or App Service Environment aloows you to deploy your app directly into a VNET. Both are available on standard pricing tier https://docs.microsoft.com/en-us/azure/app-service/networking-features#app-service-environment https://azure.microsoft.com/en-us/pricing/details/app-service/plans/

since they have already mentioned that there is an app service environment, so it wuld be isolated only..see the below text from the link :https://docs.microsoft.com/en-us/azure/app-service/environment/intro The Azure App Service Environment is an Azure App Service feature that provides a fully isolated and dedicated environment for securely running App Service apps at high scale. This capability can host your:

It would be isolated

Isolated & Always On