SC-100 Certification Practice Question #176

Question

You have an Azure subscription that contains SQL Server on Azure virtual machines located in the West US Azure region. The virtual machines are only accessible by using private IP addresses.

You plan to deploy a Windows-based Azure App Service web apps in the East US Azure region.

You need to recommend a solution to provide the web apps access to the SQL Server databases.

What should you include in the recommendation?

Accepted Answer

The database is "SQL Server on Azure virtual machines" (IaaS) reachable only by private IP, and the consumer is an App Service in a *different* region. App Service regional VNet Integration only peers within the same region (MS Learn explicitly rules out cross-region peering), so connecting East US App Service to a West US VNet requires VNet-to-VNet connectivity — an Azure VPN gateway. A private endpoint is designed for PaaS/Private Link resources, not a bare SQL VM, and would itself require additional plumbing (internal load balancer + Private Link). Confidence is held at 80% rather than higher because the community is genuinely split (17 A-votes vs. several B-votes leaning on the Private Link cross-region FAQ); MS Learn breaks the tie toward A by establishing that App Service's own integration can't span regions, and that VPN gateway is the documented cross-region/VNet-to-VNet path to a VM.

More SC-100 practice questions