Exam SC-100 topic 9 question 2 discussion

Box 1: Virtual Network Integration - correct Virtual network integration gives your app access to resources in your virtual network, but it doesn't grant inbound private access to your app from the virtual network. Box 2: Private Endpoints. - correct You can use Private Endpoint for your Azure Web App to allow clients located in your private network to securely access the app over Private Link.

1. Virtual network integration 2. Private endpoints https://learn.microsoft.com/en-us/azure/app-service/overview-vnet-integration With Azure virtual networks, you can place many of your Azure resources in a non-internet-routable network. The App Service virtual network integration feature enables your apps to access resources in or through a virtual network. https://learn.microsoft.com/en-us/azure/app-service/networking/private-endpoint You can use private endpoint for your App Service apps to allow clients located in your private network to securely access the app over Azure Private Link. The private endpoint uses an IP address from your Azure virtual network address space. Network traffic between a client on your private network and the app traverses over the virtual network and a Private Link on the Microsoft backbone network, eliminating exposure from the public Internet.

got this in exam 6oct23. passed with 896 marks. I answered as per given answer

Box1: Virtual network integration Box2: Private endpoints https://www.youtube.com/watch?v=YJqZjdzC9xE&list=PLQ2ktTy9rklhzzkSEZvDZT4QSIVUQZD-Y&index=7 Question 97

The answer for second question should be service endpoints. The question mentions Microsoft backbone which indicates service endpoints, not vNet private IP which would have suggested private endpoints. https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview

I would consider box 1 to be virtual network integration as it involves using an app service web app. But it must also be noted that virtual network integration doesn't work without a service endpoint. Network integration uses the service endpoint to further lockdown the public access to the web app.

Service endpoint doesn't have VM, so Virtual Network Integration is the only choice. https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview

perfect correct answers given