For IndividualsFor Educators
ExpertMinds LogoExpertMinds
ExpertMinds

Ace your certifications with Practice Exams and AI assistance.

  • Browse Exams
  • For Educators
  • Blog
  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Support
  • AWS SAA Exam Prep
  • PMI PMP Exam Prep
  • CPA Exam Prep
  • GCP PCA Exam Prep

© 2026 TinyHive Labs. Company number 16262776.

    PracticeAzure Solutions Architect Expert (AZ-305)Azure Solutions Architect Expert AZ-305 Practice Exam 3Question 35
    Hard1 markMultiple Choice
    Domain 3.2: High AvailabilityDomain 3High AvailabilityAzure Front DoorWAF

    AZ-305 · Question 35 · Domain 3.2: High Availability

    A global e-commerce company hosts its web application in three Azure regions: US East, Europe West, and Asia East.

    The architecture must meet the following requirements:

    • Route users to the closest region to minimize latency.
    • Provide SSL/TLS termination at the edge.
    • Protect the application against OWASP top 10 vulnerabilities (e.g., SQL injection, cross-site scripting).
    • Cache static content at the edge.

    Which global load balancing solution should you recommend?

    Answer options:

    A.

    Azure Traffic Manager

    B.

    Azure Application Gateway

    C.

    Azure Front Door

    D.

    Azure Load Balancer

    How to approach this question

    Identify the need for Global + Layer 7 (HTTP/HTTPS) + WAF + Caching. Front Door is the only service that does all four.

    Full Answer

    C.Azure Front Door✓ Correct
    Azure Front Door is a global, Layer 7 load balancer and Content Delivery Network (CDN). Because it operates at Layer 7, it can terminate SSL/TLS connections at Microsoft's global edge network. It natively integrates with Azure Web Application Firewall (WAF) to protect against OWASP vulnerabilities, caches static content at the edge, and uses anycast routing to send users to the fastest available region.

    Common mistakes

    Choosing Traffic Manager. While Traffic Manager is global, it operates at the DNS level and cannot inspect traffic, terminate SSL, or provide WAF.
    Question 34All questionsQuestion 36

    Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 3

    55 questions · hints · full answers · grading

    Sign up freeTake the exam

    More questions from this exam

    Q01Contoso Ltd is a global manufacturing company with 50,000 employees across 30 countries. They cur...MediumQ02Fabrikam Inc. is a Managed Service Provider (MSP) managing Azure environments for 50 different en...HardQ03A financial institution generates 5 TB of telemetry and audit logs daily across its Azure environ...MediumQ04A retail company has recently migrated several workloads to Azure. The IT Director wants a centra...EasyQ05A healthcare organization with 10,000 employees uses on-premises Active Directory. They are migra...Hard
    View all 55 questions →