Question

Difficulty: Very hardConfigure Azure App Service Plans

An administrator manages a Windows web app named App1 that runs on an Azure App Service plan named ASP-Prod. Currently, ASP-Prod is configured on the Basic (B1) pricing tier.

You need to configure the hosting environment and backup solution to meet the following requirements:
* Enable autoscale to automatically scale the application up to 15 instances during high-traffic events.
* Support up to 6 deployment slots for staging, testing, and pre-production builds.
* Configure daily automated backups of App1 to an Azure storage account named store1.
* Secure traffic to store1 by enabling its firewall to restrict access to selected networks only.

Which TWO actions should you perform to meet these requirements while minimizing costs?

  1. Scale up the App Service plan to the Premium v2 (P1v2) tier.Answer
  2. Configure a system-assigned managed identity for App1 and assign it the Storage Blob Data Contributor role on store1.Answer
  3. C
    Scale up the App Service plan to the Standard (S1) tier.
  4. D
    Configure the backup of App1 using the primary access key of store1.

Answer

Scale up the App Service plan to the Premium v2 (P1v2) tier, and configure a system-assigned managed identity for the web app with the Storage Blob Data Contributor role on the storage account.
To meet the requirements of 15 instances and 6 deployment slots, the App Service plan must be scaled up to at least the Premium v2 tier, as the Standard tier only supports up to 10 instances and 5 slots. To backup to a storage account with the firewall enabled, access keys are blocked. Instead, a system-assigned managed identity must be enabled on the web app and granted the Storage Blob Data Contributor role on the storage account.

Step-by-Step Solution

1
Evaluate the instance scaling and deployment slot requirements.
The requirements demand 15 scale-out instances and 6 deployment slots.
This rules out the Standard tier, which is limited to a maximum of 10 instances and 5 deployment slots.
2
Identify the most cost-effective App Service plan tier that meets these limits.
The Premium v2 (P1v2) tier supports up to 20 instances and 20 deployment slots.
Premium v2 meets the requirements and is more cost-effective than Premium v3 or Isolated tiers.
3
Analyze backup requirements to a firewall-secured storage account.
Access keys cannot bypass the storage account firewall.
Azure App Service requires a managed identity (system-assigned or user-assigned) and the Storage Blob Data Contributor role to securely perform backups to a firewalled storage account.

Key Concept

Azure App Service Plan pricing tier capabilities and secure backup configurations
Rate this question