AZ-104 Certification Practice Question #198

Question

You have an Azure subscription that contains the virtual networks shown in the following table.

The subscription contains the virtual machines shown in the following table.

The subscription contains the Azure App Service web apps shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Accepted Answer

1. **WebApp1 can communicate with VM2 (Yes):** WebApp1 uses regional VNet integration with VNet1, which enables outbound traffic to flow into VNet1. Since VNet1 is peered with VNet2 (where VM2 is located), outbound traffic from WebApp1 can reach VM2 over the peering connection.
2. **NSG1 controls inbound traffic to WebApp1 (No):** Regional VNet integration only routes outbound traffic from the App Service into the VNet. Inbound traffic still goes to the App Service's public endpoint directly and does not pass through VNet1's Subnet1, meaning NSG1 (associated with Subnet1) cannot filter or control inbound traffic to WebApp1.
3. **WebApp2 can communicate with VM1 (Yes):** WebApp2 uses the Isolated pricing tier, meaning it runs inside an App Service Environment (ASE) deployed directly within Subnet2 of VNet2. Because VNet2 is peered with VNet1, WebApp2 enjoys native VNet routing capabilities and can communicate bidirectionally with VM1.

More AZ-104 practice questions