Examkin

Question

Difficulty: EasyConfigure Azure Application Gateway

You are deploying an Azure Application Gateway to publish a secure web application. You need to configure a new listener to accept incoming HTTPS traffic. Which two settings must be defined directly within the listener configuration? (Select two.)

  1. The frontend IP address configuration (public or private)Answer
  2. The SSL/TLS certificateAnswer
  3. C
    The backend pool containing the target web servers
  4. D
    The inbound Network Security Group (NSG) rules for the gateway subnet

Answer

To configure a listener for HTTPS traffic on an Azure Application Gateway, you must define the frontend IP address configuration and the SSL/TLS certificate directly on the listener.
An Application Gateway listener is the logical entity that checks for incoming connection requests. For HTTPS, it must know which frontend IP address to monitor and require an SSL/TLS certificate to secure the session and decrypt the traffic.

Step-by-Step Solution

1
Identify listener requirements for HTTPS protocol.
An HTTPS listener requires a port (typically 443), an associated frontend IP (public or private), and an SSL/TLS certificate to decrypt traffic.
This establishes the entry point and decryption mechanism for the incoming traffic.
2
Determine where the backend pool is associated.
The backend pool is configured separately and linked to the listener via routing rules.
This decouples the routing logic and backend targets from the listener itself.
3
Determine where NSG rules are applied.
NSG rules are associated with the subnet where the Application Gateway is deployed, not within the Application Gateway configuration resource.
Subnet-level security governs all traffic entering or leaving the subnet.

Key Concept

Azure Application Gateway Listener Configuration
Rate this question

Topics

Configure Azure Application Gateway

More questions from this topic