A company is deploying a new web app to Azure App Service. The app must be accessible only from the company's on-premises network via a site-to-site VPN. They also want to use a custom domain (internal.contoso.com) that resolves to the app's private IP. They have already created a virtual network and connected it to the on-premises network via VPN. What should they do to meet both requirements?

Enable VNet Integration and create a public DNS record for internal.contoso.com pointing to the App Service's public IP

Use an App Service Environment (ASE) with an internal load balancer and a private DNS zone

Create the App Service with a Private Endpoint, configure access restrictions to allow only the on-premises IP range, and create a private DNS zone for contoso.com linked to the VNet

Place the App Service in a subnet and assign a network security group that allows only the VPN gateway

Your team is deploying a new version of a web app. You want to use deployment slots to stage the new version. You also need to ensure that the production slot's custom domain and TLS certificate remain associated with the production slot after the swap. You have already created a staging slot and deployed the new version. What should you do next?

Delete the staging slot and redeploy the new version directly to production.

Test the staging slot, then perform a swap with the production slot.

Manually copy the custom domain and TLS certificate to the staging slot before swapping.

Update DNS to point to the staging slot's URL after testing.

Your team is developing a new version of a web app. You want to deploy this version to a staging environment and test it before swapping to production. You also need to ensure that the staging environment uses the same custom domain and TLS certificate as production after the swap. What should you do?

Create a deployment slot named 'staging', deploy the new version to it, test it, and then swap it with the production slot.

Use Azure Traffic Manager to route a percentage of traffic to a separate test app.

Deploy the new version directly to the production slot but use a test URL to verify it before making it the default.

Create a separate App Service plan and deploy the new version to it, then update DNS to point to the new app.

Microsoft Certified:Azure Administrator Associate

Domain 3Objective 5

Create and Configure Azure App Service AZ-104 Practice Questions (Page 8)

Part of the Deploy and manage Azure compute resources domain, which accounts for 20–25% of the AZ-104 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~8–16 in this domain), expect 2–3 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

8concepts

20–25%of the exam

Questions 36–40

36expert · hard
A company is deploying a new web app to Azure App Service. The app must be accessible only from the company's on-premises network via a site-to-site VPN. They also want to use a custom domain (internal.contoso.com) that resolves to the app's private IP. They have already created a virtual network and connected it to the on-premises network via VPN. What should they do to meet both requirements?
Select an answer first
37foundation · easy
You need to restrict access to your Azure App Service so that only requests from your corporate IP range are allowed. Which App Service networking feature should you configure?
Select an answer first
38expert · hard
Your team is deploying a new version of a web app. You want to use deployment slots to stage the new version. You also need to ensure that the production slot's custom domain and TLS certificate remain associated with the production slot after the swap. You have already created a staging slot and deployed the new version. What should you do next?
Select an answer first
39foundation · easy
You need to host a web app on Azure App Service. Which Azure resource must you create first to define the compute resources and pricing tier for the web app?
Select an answer first
40application · medium
Your team is developing a new version of a web app. You want to deploy this version to a staging environment and test it before swapping to production. You also need to ensure that the staging environment uses the same custom domain and TLS certificate as production after the swap. What should you do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-104

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-104” is a trademark of its owner, used for identification only.

Create and Configure Azure App Service AZ-104 Practice Questions (Page 8)

Questions 36–40

You need to restrict access to your Azure App Service so that only requests from your corporate IP range are allowed. Which App Service networking feature should you configure?

You need to host a web app on Azure App Service. Which Azure resource must you create first to define the compute resources and pricing tier for the web app?

Keep studying — Deploy and manage Azure compute resources