Question 1

A financial application is hosted on Azure App Service (Premium V3 plan).

The architecture has the following strict security and operational requirements:
1. The App Service must securely access a backend Azure SQL Database over a private IP address.
2. The App Service itself must only be accessible from the corporate on-premises network (via ExpressRoute); all public internet access must be blocked.
3. Deployments of new application versions must result in zero downtime.

Which THREE features must you configure to meet these requirements? (Select THREE)

Accepted Answer

Map requirements to features: Outbound to VNet = VNet Integration. Inbound from VNet = Private Endpoint. Zero downtime = Deployment Slots.

Question 2

What mistakes do candidates make on this AZ-305 question?

Accepted Answer

Confusing VNet Integration (outbound) with Private Endpoints (inbound). Both are required for full two-way private connectivity.

How to approach this question

Full Answer

Common mistakes

Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 3

More questions from this exam