[&] Which of the following support connection to a web app directly from an Azure VM without going through the public internet?
- SSL/TLS settings
- Private service endpoint -- Correct
- ExpressRoute private peering
- ExpressRoute Microsoft peering

[&] Which Azure web app feature supports "canary releases"? (choose 1)
- Web sockets
- Deployment slots -- Correct
- Always on
- Public service endpoints