A public App Service API must reach a private database, and a separate requirement now makes API ingress private. Which two controls address the directions? Select 2 answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

A.Attach a NAT Gateway and assume it rejects every API caller
B.Treat outbound VNet integration alone as private ingress
C.Use supported private endpoints or appropriate access restrictions to control inbound API access
D.Use VNet integration for outbound access to the private database
E.Replace the database identity permissions with a private route

Show the answer and explanation

✓ Correct answers

Use supported private endpoints or appropriate access restrictions to control inbound API access
Use VNet integration for outbound access to the private database

Outbound VNet integration and inbound private endpoints or restrictions solve distinct network directions. Integration alone does not privatize the web endpoint, NAT supplies outbound translation rather than API ingress policy, and network reachability does not replace database authorization. Source guide: PDF page(s) 46.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.