Crucial Exams

Microsoft Azure Security Engineer Associate AZ-500 Practice Question

You have an Azure App Service web app named ContosoWeb that shares an Azure region with a virtual network (VNet) connected to your on-premises network by a site-to-site VPN. ContosoWeb must call an on-premises REST API over private IP addresses through the VPN tunnel, while the web app must remain publicly accessible from the internet. Which networking feature should you configure first to satisfy the requirement?

  • Assign an Azure NAT Gateway to control the outbound traffic of ContosoWeb.

  • Enable regional VNet Integration for ContosoWeb and attach it to a subnet in the VNet.

  • Create a private endpoint for ContosoWeb in the VNet.

  • Enable a service endpoint for Azure App Service on the VNet subnet.

Microsoft Azure Security Engineer Associate AZ-500
Secure networking
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot