Examkin

Question

Difficulty: EasyDesign Traffic Routing and Failover Strategies

You are designing a global routing solution for a web application hosted in multiple Azure regions. The solution must support automatic failover to a secondary region and offload SSL/TLS decryption to the edge closest to the users. Which Azure service should you recommend?

  1. Azure Front DoorAnswer
  2. B
    Azure Traffic Manager
  3. C
    Azure SQL Database Auto-Failover Groups
  4. D
    User-Defined Routes (UDRs) to manually redirect web traffic

Answer

Azure Front Door
Azure Front Door is a global, scalable entry-point that uses the Microsoft global edge network to host web applications. It supports Anycast DNS, SSL/TLS termination at the edge, and automatic regional failover, matching the requirements of the scenario.

Step-by-Step Solution

1
Identify the application layer requirements.
The application requires SSL/TLS termination at the edge and automatic global failover.
These requirements specify a global Layer 7 load balancing solution.
2
Compare global routing options in Azure.
Azure Front Door is a Layer 7 global service that operates at the edge, while Azure Traffic Manager is a Layer 4/DNS-based service.
DNS-based load balancers cannot perform SSL decryption or path-based routing as they do not inspect HTTP/HTTPS payloads.
3
Select the correct service.
Azure Front Door provides edge-based SSL termination and automatic global failover.
It fulfills all the architectural requirements.

Key Concept

Distinguishing between DNS-based routing (Traffic Manager) and Anycast Layer 7 routing (Front Door) for global web applications requiring SSL offloading.
Estimated Time:45s
Rate this question

Topics

Design Traffic Routing and Failover Strategies

More questions from this topic