SC-100 Certification Practice Question #276

Question

You need to recommend a strategy for App Service web app connectivity. The solution must meet the landing zone requirements.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Accepted Answer

The two boxes describe opposite traffic directions. App Service → VM is **outbound from the app**, which is exactly what regional virtual network integration provides (the app routes outbound calls into the VNet to reach VMs). VM → App Service is **inbound to the app**, and MS Learn is explicit that VNet integration does not grant inbound access; the feature that brings the web app into the VNet with a private IP for inbound private access is a **private endpoint** (Azure Private Link). The dominant community comment (40 👍) and supporting votes match this, and MS Learn directly backs both directions. The lone service-endpoint dissent is low-vote and conflates service endpoints (subnet-to-service security) with the inbound private path a VM needs. High confidence, just under the top band because no official Suggested/Most-Voted tag is recorded.

More SC-100 practice questions