Application networking
CoreApp Service networking
Inbound access, private endpoints, and outbound VNet integration.
Key points
- Private endpoints provide private inbound connectivity to an app.
- VNet integration provides outbound app connectivity into a VNet.
- Access restrictions and public network posture govern allowed inbound paths.
Best-known use cases
- Let an app call a private database.
- Expose an app privately through a VNet address.
What candidates often confuse it with
- Private endpoint vs VNet integration: inbound private client path vs outbound app path.
- Access restriction vs NSG: app-level inbound rule vs subnet or NIC traffic filter.
Key takeaway
Select App Service networking by traffic direction and configure DNS, subnet, routes, and target firewalls as part of the path.
Related services
- App Service custom domains and TLS
- App Service deployment slots and backup
Relevant exam tasks
- D3.4.S4 — Configure certificates and Transport Layer Security (TLS) for an App Service
- D3.4.S5 — Map an existing custom DNS name to an App Service
- D3.4.S6 — Configure backup for an App Service
- D3.4.S7 — Configure networking settings for an App Service
- D3.4.S8 — Configure deployment slots for an App Service