nerdexam
Microsoft

AZ-700 · Question #125

You have an Azure subscription that is linked to an Azure AD tenant named contoso.onmicrosoft.com. The subscription contains the following resources: - A virtual network named Vnet1 - An App Service…

The correct answer is A. Create a private endpoint for webapp1. You can use private DNS zones to override the DNS resolution for a private endpoint. A private DNS zone can be linked to your virtual network to resolve specific domains. When you use Private Endpoint for Web App, the requested URL must match the name of your Web App. When you…

Submitted by anjalisingh· Apr 18, 2026

Question

You have an Azure subscription that is linked to an Azure AD tenant named contoso.onmicrosoft.com. The subscription contains the following resources:

  • A virtual network named Vnet1
  • An App Service plan named ASPI
  • An Azure App Service named webapp1
  • An Azure private DNS zone named private.contoso.com
  • Virtual machines on Vnet1 that cannot communicate outside the virtual

network You need to ensure that the virtual machines on Vnet1 can access webapp1 by using a URL of https:/Avwwprivate.contosocom. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Options

  • ACreate a private endpoint for webapp1.
  • BCreate a service endpoint for webapp1.
  • DCreate a CNAME record that maps wwwprivatemntoso.com to webapp1.contoso.onmicrosoft.com.
  • ERegister an enterprise application in Azure AD for webapp1.
  • FCreate a CNAME record that maps wow.private.contoso.com to webapp 1 [email protected].

How the community answered

(19 responses)
  • A
    84% (16)
  • B
    11% (2)
  • F
    5% (1)

Explanation

You can use private DNS zones to override the DNS resolution for a private endpoint. A private DNS zone can be linked to your virtual network to resolve specific domains. When you use Private Endpoint for Web App, the requested URL must match the name of your Web App. When you deploy a Private Endpoint, we update the DNS entry to point to the canonical name mywebapp.privatelink.azurewebsites.net. For example, the name resolution will be (Name, Type, Value): mywebapp.azurewebsites.net CNAME mywebapp.privatelink.azurewebsites.net https://docs.microsoft.com/en-us/azure/app-service/networking/private-endpoint

Community Discussion

No community discussion yet for this question.

Full AZ-700 Practice