Question

Difficulty: Very hardApplication Load Balancing and Delivery

A multinational enterprise is designing a high-availability infrastructure in Azure for a new online banking application. The design must meet the following requirements:
- Global client requests must be routed based on the URL path (e.g., /payments to Region 1 and /accounts to Region 2).
- SSL/TLS termination must be performed at the global routing edge to reduce latency.
- Within each region, HTTP(S) traffic must be distributed across a pool of virtual machines with session affinity.
- A legacy batch processing component in Region 1 must receive TCP-based traffic on port 8088 distributed via an Azure Load Balancer. The existing virtual machines for this component are currently assigned Basic SKU public IP addresses.

Which two configuration decisions must you include in the network architecture design to satisfy these requirements? (Select TWO).

  1. Provision Azure Front Door to handle the global path-based routing and SSL/TLS termination at the edge.Answer
  2. Upgrade the public IP addresses of the legacy batch processing virtual machines to Standard SKU before adding them to a Standard Load Balancer backend pool.Answer
  3. C
    Provision Azure Traffic Manager to perform SSL/TLS termination and route client requests based on the URL path.
  4. D
    Deploy a Standard Azure Load Balancer and directly associate the existing legacy virtual machines using their Basic SKU public IP addresses.

Answer

Provision Azure Front Door for global routing and SSL termination, and upgrade the legacy virtual machines' public IP addresses to Standard SKU before adding them to a Standard Load Balancer backend pool.
To satisfy the global Layer 7 routing and SSL/TLS termination requirements, Azure Front Door must be used. To support the regional TCP-based batch processing component using a Standard Load Balancer, the public IP addresses of the legacy virtual machines must be upgraded to Standard SKU to ensure compatibility.

Step-by-Step Solution

1
Analyze global routing and SSL/TLS requirements.
Identify that the system requires Layer 7 path-based routing and SSL/TLS termination at the global level.
Azure Front Door operates at Layer 7 and is the correct choice, whereas Traffic Manager is a DNS-based Layer 4 load balancer.
2
Analyze regional TCP load balancing requirements and legacy VM configuration.
Identify that legacy virtual machines have Basic SKU public IP addresses and need to be placed behind a Standard Azure Load Balancer.
Standard Azure Load Balancer requires all associated VM network interfaces and public IP addresses to use the Standard SKU.
3
Formulate remediation for the legacy VM public IP addresses.
Determine that the legacy VMs' public IP addresses must be upgraded to Standard SKU.
This avoids the SKU mismatch validation error (err_az305_core_infra_network_lb_sku_mismatch).

Key Concept

Selecting appropriate global and regional load balancing services while maintaining SKU compatibility across resources.
Estimated Time:3m 0s
Rate this question