AZ-104 Question 191
Single answerYou manage an Azure App Service hosting an application that needs to securely access a back-end SQL database located in a private subnet within an Azure Virtual Network. The database must remain inaccessible to the public internet. Which networking configuration should you enable on the App Service to ensure it can connect to the database privately?
- A
Turn on WebSocket support
- B
Enable Virtual Network Integration
- C
Add custom domain bindings
- D
Configure IP Restriction rules to allow traffic from any address
Show answer and explanation
Correct answer: B
Explanation
Virtual Network Integration is the feature that allows the App Service to be injected into the specified Virtual Network, enabling secure communication with resources that are isolated to private subnets. Other options do not ensure private connectivity to a protected SQL database.
- A. Incorrect.
Turning on WebSocket support enables real-time communication but doesn’t connect the App Service to a private subnet.
- B. Correct.
Enabling Virtual Network Integration registers the App Service to use a private IP from the target Virtual Network, allowing secure access to internal resources like a SQL database in a private subnet.
- C. Incorrect.
Adding custom domain bindings only configures domain names for the App Service and does not control network connectivity to private subnets.
- D. Incorrect.
IP Restrictions can help limit some traffic but do not inherently enable private access to resources in a Virtual Network.