Medium1 markMultiple Choice
Domain 4.4: Network SolutionsDomain 4.4Front DoorWAF
This question is part of a case study — click to read the full scenario(Case 51)

CASE STUDY: Contoso Ltd is a global financial services firm with 10,000 employees. They have a primary on-premises data center in London and a secondary in New York. They are migrating to Azure and require a hub-and-spoke network topology. Requirements: 1) Secure connectivity between on-premises and Azure with at least 5 Gbps throughput and redundancy. 2) Centralized inspection of all outbound internet traffic from spoke VNets. 3) Spoke VNets must communicate with each other securely. 4) PaaS services (Storage, SQL) must be accessed privately without traversing the public internet. 5) Web applications in spokes require WAF protection and global load balancing.

Question 1 of 5: To meet Requirement 1 (Secure connectivity with at least 5 Gbps throughput and redundancy), which hybrid connectivity solution should you recommend?

AZ-305 · Question 55 · Domain 4.4: Network Solutions

CASE STUDY: Contoso Ltd is a global financial services firm with 10,000 employees. They have a primary on-premises data center in London and a secondary in New York. They are migrating to Azure and require a hub-and-spoke network topology. Requirements: 1) Secure connectivity between on-premises and Azure with at least 5 Gbps throughput and redundancy. 2) Centralized inspection of all outbound internet traffic from spoke VNets. 3) Spoke VNets must communicate with each other securely. 4) PaaS services (Storage, SQL) must be accessed privately without traversing the public internet. 5) Web applications in spokes require WAF protection and global load balancing.

Question 5 of 5: To meet Requirement 5 (WAF protection and global load balancing for web apps), which service should you deploy?

Answer options:

A.

Azure Application Gateway.

B.

Azure Traffic Manager.

C.

Azure Front Door.

D.

Azure Load Balancer.

How to approach this question

Identify the service that combines global routing with Layer 7 security.

Full Answer

C.Azure Front Door.✓ Correct
Azure Front Door.
Azure Front Door is a global, Layer 7 load balancer that provides fast, reliable, and secure access to your web applications. It natively integrates with Azure Web Application Firewall (WAF) to protect against common exploits.

Common mistakes

Choosing Application Gateway, missing the 'global' requirement.

Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 6

55 questions · hints · full answers · grading

More questions from this exam