SC-100 · Question #85
SC-100 Question #85: Real Exam Question with Answer & Explanation
The correct answer is B: an Azure App Service Environment (ASE). {"question_number": 7, "correct_answer": "B", "explanation": "The correct answer is B: Azure App Service Environment (ASE). An ASE deploys the Azure App Service infrastructure (including serverless components like Azure Functions and App Service apps) directly into a dedicated su
Question
Your company is developing a serverless application in Azure that will have the architecture shown in the following exhibit. You need to recommend a solution to isolate the compute components on an Azure virtual network. What should you include in the recommendation?
Options
- AAzure Active Directory (Azure AD) enterprise applications
- Ban Azure App Service Environment (ASE)
- CAzure service endpoints
- Dan Azure Active Directory (Azure AD) application proxy
Explanation
{"question_number": 7, "correct_answer": "B", "explanation": "The correct answer is B: Azure App Service Environment (ASE). An ASE deploys the Azure App Service infrastructure (including serverless components like Azure Functions and App Service apps) directly into a dedicated subnet within an Azure Virtual Network. This provides full network isolation, allowing the compute components to be treated like any other VNet resource with NSG rules, private routing, and no public internet exposure. Azure AD enterprise applications (A) manage app identity, not network placement. Azure service endpoints (C) extend VNet identity to Azure PaaS services for access control but do not isolate the compute into a VNet. Azure AD Application Proxy (D) provides secure remote access to on-premises apps and is unrelated to VNet isolation of compute.", "generated_by": "claude-sonnet", "llm_judge_score": 4}
Topics
Community Discussion
No community discussion yet for this question.