Designing and Implementing Microsoft Azure Networking Solutions AZ-700 — Topic 5 Question 313

Question

You have an Azure subscription that is linked to an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com. The subscription contains the following resources: • A virtual network named Vnet1 • An App Service plan named ASP1 • An Azure App Service named webapp1 An Azure private DNS zone named private.contoso.com • Virtual machines on Vnet1 that cannot communicate outside the virtual network You need to ensure that the virtual machines on Vnet1 can access webapp1 by using a URL of https://www.private.contoso.com. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Accepted Answer

Correct answer: E, F. The correct answer is E, F. Option E: Create a private endpoint for webapp1. Option F: Create a CNAME record that maps www.private.contoso.com to webapp1.privatelink.azurewebsites.net. A Private Endpoint gives private, in-VNet connectivity to an Azure service, keeping traffic off the public internet.

Designing and Implementing Microsoft Azure Networking Solutions AZ-700 — Question 313