Secure Integration Design for Power Apps and On-Premises Systems

Correct Answers: D

Azure provides a Relay service for a secure connection to the services running on a corporate network without intrusive network changes or opening the firewall port.

You can use the Azure Relay to connect the Power Platform solutions with the on-premises services.

The on-premises service connects to the relay using an outbound port and creates a bi-directional socket with a dedicated address.

The Power Apps app can make an HTTP call to the Relay service, and the service transfers a call to the on-premises listener.

The app does not need to know the location of the on-premises service.

Azure Relay establishes the connection between the app and on-premises service, and both parties can exchange messages with each other.

Option A is incorrect because the Azure Function is helpful for small units of work and helps to offload the logic operations from the Dataverse application host.

But the Azure Function does not provide a secure connection between the Power Apps app and the on-premises system.

Option B is incorrect because VPN integration has a more demanding and network intrusive setup than Azure Relay.

Option C is incorrect because the Azure Logic Apps does not secure a connection between the Power Apps app and the on-premises system.

Option E is incorrect because the Azure Event Hub is a real-time data ingestion service that can process millions of events per second and deliver them to subscribers.

But it does not provide a secure connection between the Power Apps app and the on-premises system.

For more information about the Power Platform and Azure Relay integration, please visit the below URLs:

Based on the scenario described, the Power Apps app needs to securely integrate with an on-premises system that is not accessible from the internet and has several REST endpoints. There are several services in Azure that could be used for this purpose, but the best service to use in this scenario is a VPN.

A VPN, or virtual private network, is a secure connection between two devices or networks. It allows data to be transmitted securely over the internet, as if the devices or networks were physically connected. In this scenario, a VPN can be used to securely connect the Power Apps app to the on-premises system, allowing the app to access the REST endpoints.

Here are some benefits of using a VPN in this scenario:

1. Secure connectivity: A VPN provides a secure connection between the Power Apps app and the on-premises system. All data transmitted over the VPN is encrypted, which prevents unauthorized access to sensitive information.

2. Private communication: A VPN creates a private network between the Power Apps app and the on-premises system, which ensures that only authorized users have access to the network.

3. Cost-effective: Setting up a VPN can be more cost-effective than other solutions, such as Azure Logic App or Azure Relay.

While the other services listed (Azure Function, Azure Logic App, Azure Relay, and Azure Event Hubs) can also be used to integrate the Power Apps app with the on-premises system, a VPN is the best option for a secure, cost-effective, and private connection between the two systems.