Microsoft Certified: Azure Administrator AssociateDeploy and manage Azure compute resourcesHard
A developer is deploying an Azure App Service Web App that needs to connect to an Azure SQL Database. The database is secured with a firewall rule that only allows connections from specific IP addresses. To ensure secure connectivity without exposing the App Service to the public internet, which networking feature should be configured for the App Service?
- AAccess Restrictions
- BHybrid Connections
- CPrivate Endpoint
- DVirtual Network Integration
Show answer & explanationAnswer & explanation
Correct answer: D. Virtual Network Integration
Virtual Network Integration allows an App Service to connect to resources within a virtual network, such as a private Azure SQL Database, by routing outbound traffic through the VNet. This enables the App Service to acquire a private IP within the VNet, which can then be whitelisted in the SQL Database firewall.
Why the other options are wrong
- A. Access Restrictions control inbound traffic to the App Service, not outbound traffic from the App Service to the SQL Database.
- B. Hybrid Connections are for connecting to on-premises resources, not for connecting to Azure SQL Database within a virtual network securely.
- C. Private Endpoint is used to bring Azure services (like SQL DB) into your VNet, but for the App Service to initiate connection to a private endpoint, it still needs to be integrated with the VNet itself. Private Endpoint for App Service is for inbound traffic, not outbound to SQL DB.
App Service VNet Integration
Enables an App Service to access resources in an Azure Virtual Network by routing outbound traffic through the VNet. This allows the App Service to use private IP addresses within the VNet.
- Enables outbound connectivity to VNet resources
- App Service gets a private IP address within the VNet
- Used for connecting to private endpoints, service endpoints, or other VNet resources
- Does not provide inbound access to the App Service from the VNet by default
Memory trick: Integrate your App Service to Get to Your SQL DB.