AZ500 Quiz 8/11 Section-Based – Secure networking (AZ-500) question 8

[aocferreira]

Hello,

Can anyone explain why the answer to the below question is ‘No’ ?
You can enable another virtual network integration for GlobalSG using TDSubnet2 = No

I’m reading this on Azure doc, but probably I’m just missing something:
“The virtual network integration feature supports two virtual interfaces per worker. Two virtual interfaces per worker mean two virtual network integrations per App Service plan. In other words, an App Service plan can have virtual network integrations with up to two subnets/virtual networks. The apps in the same App Service plan can only use one of the virtual network integrations to a specific subnet, meaning an app can only have a single virtual network integration at a given time.”

Thanks.

[aocferreira]

question is why if it’s already integrated with TDSubnet1 why it cannot be integrated with TDSubnet2 if “can have virtual network integrations with up to two subnets/vnets” ?

[Nikee-TutorialsDojo]

Hello aocferreira,

Thank you for your feedback and for sharing your thoughts with us.

The Azure virtual network integration feature supports multiple virtual network integrations per App Service plan. However, it’s important to note the distinction between App Service plans and individual apps:

1. App Service Plan: An App Service plan can integrate with two subnets (from either one or two VNets), allowing the infrastructure to support multiple integrations.

2. Individual App: However, each individual app (like GlobalSG) within the App Service plan can only integrate with one subnet at a time. This means that GlobalSG (an individual app) cannot be connected to TDsubnet1 and TDsubnet2 at the same time, even if both subnets are part of the same App Service plan.

Even though an App Service plan allows up to two subnet integrations across VNets, an individual app can only be connected to one subnet at a time.

The answer to whether GlobalSG can have another virtual network integration with TDsubnet2 is No, because:

• GlobalSG is already integrated with TDsubnet1 in the same App Service plan, and Azure does not allow a single app to be integrated with two subnets simultaneously within the same plan.
• The Azure documentation confirms that while an App Service plan can have integrations with multiple subnets, each individual app can only use one subnet integration at any time.

I hope this clarifies any confusion you may have. Please feel free to reach out if you have any further questions.

Regards,

Nikee @ Tutorials Dojo