ExpertHard1 markMultiple Choice
AZ-305 · Question 35 · Domain 3.2: Design for high availability
You are designing the global routing architecture for a public-facing e-commerce web application.
The application is hosted on Azure App Service in three regions: East US, West Europe, and Southeast Asia.
Requirements:
- Route users to the closest region to minimize latency.
- Provide SSL/TLS termination at the edge.
- Protect the application from common web vulnerabilities (SQL injection, XSS) using a Web Application Firewall (WAF).
- Cache static content (images, CSS) at the edge.
Which Azure service should you recommend?
You are designing the global routing architecture for a public-facing e-commerce web application.
The application is hosted on Azure App Service in three regions: East US, West Europe, and Southeast Asia.
Requirements:
- Route users to the closest region to minimize latency.
- Provide SSL/TLS termination at the edge.
- Protect the application from common web vulnerabilities (SQL injection, XSS) using a Web Application Firewall (WAF).
- Cache static content (images, CSS) at the edge.
Which Azure service should you recommend?
Answer options:
A.
Azure Front Door
B.
Azure Traffic Manager
C.
Azure Application Gateway
D.
Azure Load Balancer
How to approach this question
Combine the requirements: Global + Layer 7 (HTTP/HTTPS) + WAF + Caching. This combination uniquely identifies Azure Front Door.
Full Answer
A.Azure Front Door✓ Correct
Azure Front Door
Azure Front Door is a global, Layer 7 load balancer and Content Delivery Network (CDN). It routes HTTP/HTTPS traffic to the fastest available region, terminates SSL at the Microsoft edge, caches static assets, and integrates with Azure Web Application Firewall (WAF) to protect against OWASP top 10 vulnerabilities. Traffic Manager is DNS-based (Layer 4) and lacks WAF/caching. Application Gateway is Layer 7 with WAF, but is restricted to a single region.
Common mistakes
Choosing Traffic Manager. While TM does global routing, it operates at the DNS level and cannot inspect traffic for WAF or cache content.
Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 1
55 questions · hints · full answers · grading
More questions from this exam
Q01Contoso Ltd is a global financial institution with 80 Azure subscriptions spread across 4 managem...MediumQ02Fabrikam Inc. operates a hybrid cloud environment with 500 on-premises VMware virtual machines ru...HardQ03A startup company has a single Azure subscription with a monthly budget of $5,000.
The CFO want...EasyQ04You are designing an Azure Sentinel architecture for a Managed Security Service Provider (MSSP). ...MediumQ05A healthcare enterprise is migrating its infrastructure to Azure. They have strict compliance req...Hard