nerdexam
Microsoft

AZ-104 · Question #715

Hotspot Question You have an Azure subscription that contains the virtual networks shown in the following table. The subscription contains the virtual machines shown in the following table. The subscr

The correct answer is WebApp1 can communicate with VM2. = Yes; NSG1 controls inbound traffic to WebApp1. = No; WebApp2 can communicate with VM1. = No. WebApp1 can communicate with VM2 (Yes) because WebApp1 is integrated with VNet1, and VM2 resides in VNet2 which is peered with VNet1, allowing transitive-like communication through VNet integration and peering. NSG1 does NOT control inbound traffic to WebApp1 (No) because NSGs ap

Submitted by weili_xi· Mar 4, 2026Configure and manage virtual networking - specifically understanding how Azure App Service VNet Integration, VNet Peering, and NSG scope interact to control communication between App Services and Virtual Machines.

Question

Hotspot Question You have an Azure subscription that contains the virtual networks shown in the following table. The subscription contains the virtual machines shown in the following table. The subscription contains the Azure App Service web apps shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer:

Exhibits

AZ-104 question #715 exhibit 1
AZ-104 question #715 exhibit 2
AZ-104 question #715 exhibit 3
AZ-104 question #715 exhibit 4

Answer Area

  • WebApp1 can communicate with VM2.Yes
  • NSG1 controls inbound traffic to WebApp1.No
  • WebApp2 can communicate with VM1.No

Explanation

WebApp1 can communicate with VM2 (Yes) because WebApp1 is integrated with VNet1, and VM2 resides in VNet2 which is peered with VNet1, allowing transitive-like communication through VNet integration and peering. NSG1 does NOT control inbound traffic to WebApp1 (No) because NSGs apply to virtual network subnets or NICs attached to VMs, not directly to Azure App Service web apps - App Service uses its own access restriction mechanisms. WebApp2 cannot communicate with VM1 (No) because WebApp2 is not configured with VNet integration (or is integrated with a different VNet that is not peered with VM1's VNet), meaning it has no private network path to reach VM1.

Topics

#Azure Virtual Network Integration#VNet Peering#Network Security Groups#Azure App Service Networking

Community Discussion

No community discussion yet for this question.

Full AZ-104 Practice