Microsoft Azure Administrator (AZ104) Practice Exam

What should you deploy to enable webapp1 to connect to the on-premises SMB share?

1. An Azure Application Gateway

2. An Azure Active Directory Application Proxy

3. An Azure Virtual Network Gateway

4. A Virtual Network Service Endpoint

The correct answer is: An Azure Virtual Network Gateway

To enable a web application in Azure to connect to an on-premises SMB (Server Message Block) share, deploying an Azure Virtual Network Gateway is the appropriate choice. An Azure Virtual Network Gateway provides secure communication between an Azure Virtual Network and your on-premises network. It acts as a bridge, allowing the web application hosted in Azure to access resources that exist in your local environment, such as an SMB share. This can be achieved through either site-to-site VPN connections or ExpressRoute, which establish private connections between Azure and your on-premises network. When the web application needs to access files or resources stored on an SMB share, it must be able to connect to the on-premises network. The Virtual Network Gateway facilitates this connection by routing traffic securely over the network, enabling the Azure resources to interact with the local SMB share as if they were part of the same network. Other choices do not provide the necessary functionality for this scenario. For example, an Azure Application Gateway is primarily used for web traffic load balancing and does not provide a direct connection to on-premises resources. The Azure Active Directory Application Proxy is designed to provide secure remote access to on-premises applications but does not facilitate file share access. A Virtual Network Service Endpoint enhances connectivity to