AZ-104 Practice Question 66: App Service Vnet Integration Outbound
Microsoft Azure Administrator Associate (AZ-104) · Test 7 · question 6 of 10
A web app on Azure App Service (Premium v3 plan) must call a database that has only a private IP address in a virtual network. The web app itself remains publicly reachable, and the company does not want to pay for an App Service Environment.
What should the administrator configure so that the web app can reach the database?
Show answer and explanation
Answer:
Regional virtual network integration gives the web app outbound access to resources in a VNet. Calls from the app go out through the integration subnet, so it can reach private addresses in that VNet (and peered or connected networks). It works on the Basic and higher plans, and the app stays publicly reachable for inbound traffic.
Option B controls the opposite direction. A private endpoint gives the web app a private inbound address so clients in the VNet can reach it. It does not let the app make outbound calls into the VNet.
Option C does not fit. A service endpoint secures traffic from a subnet to a supported PaaS service by identifying the subnet. Adding one to the database's subnet does not give the web app a network path to that subnet.
Option D would also work but is a dedicated, single-tenant deployment with a much higher cost. It goes against the stated wish to avoid an App Service Environment.