You are deploying a multi-tenant web app on Azure App Service. Requirements: inbound access must be private from the corporate network only; outbound calls to Azure SQL Database must use private endpoints; use blue/green deployments with no downtime; and scale out automatically based on load. Which two configurations are required?
Choose an answer
Tap an option to check your answer.
Correct answer: Use an App Service Plan on PremiumV3 and configure a Private Endpoint for the web app; disable public network access for the app., Enable Regional VNet Integration from the web app to a delegated subnet that has the private endpoints for backend services..
Why this is the answer
The PremiumV3 App Service Plan is required for Private Endpoint functionality, which secures inbound access to the web app from the corporate network. Disabling public network access ensures only private access is allowed. Regional VNet Integration allows the web app to connect to resources within a virtual network, such as the Azure SQL Database via its private endpoint, fulfilling the outbound private connectivity requirement. This setup also supports blue/green deployments using deployment slots, which are available on PremiumV3, and auto-scaling. Incorrect options: Deployment Slots are available on Standard and higher tiers, but the PremiumV3 tier is specifically needed for Private Endpoint functionality. App Service Environment v1 is a legacy product and does not meet the requirements for private endpoints for outbound calls or blue/green deployments as efficiently as newer features. A Basic App Service Plan does not support Private Endpoints or VNet Integration, which are crucial for the specified private access requirements.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed