Examkin

Question

Difficulty: HardApplication Load Balancing and Delivery

An enterprise is designing a regional application delivery and load balancing solution in Azure. The architecture must support a multi-tier application with the following requirements:

1. Handle incoming HTTP/HTTPS traffic, perform SSL/TLS termination, and route requests to different backend pools based on the URL path (/orders/* and /products/*).
2. Load balance inbound TCP traffic on port 9090 across a pool of Azure Virtual Machines.
3. The virtual machines currently use Basic SKU public IP addresses for direct administrative access.
4. The load balancing components must support Availability Zones for high availability.

Which two actions should you include in the design to meet the requirements while preventing configuration failures? (Select two.)

  1. Deploy an Azure Application Gateway v2 to manage the URL path-based routing and SSL/TLS termination.Answer
  2. Deploy an Azure Standard Load Balancer to route the TCP traffic on port 9090, and upgrade the virtual machine public IP addresses to Standard SKU.Answer
  3. C
    Deploy an Azure Basic Load Balancer to route the TCP traffic on port 9090, allowing the virtual machines to keep their existing Basic SKU public IP addresses.
  4. D
    Deploy Azure Traffic Manager to manage the incoming HTTP/HTTPS traffic, perform SSL/TLS termination, and route requests based on the URL path.
  5. E
    Configure the Azure Standard Load Balancer to perform URL path-based routing and SSL/TLS termination for the HTTP/HTTPS traffic.

Answer

Deploying an Azure Application Gateway v2 to manage the URL path-based routing and SSL/TLS termination, and deploying an Azure Standard Load Balancer to route the TCP traffic on port 9090 while upgrading the virtual machine public IP addresses to Standard SKU.
Deploying an Azure Application Gateway v2 satisfies the requirement for Layer 7 load balancing, which includes URL path-based routing and SSL/TLS termination within a region, and supports availability zones. Since the backend virtual machines must also load balance Layer 4 TCP traffic on port 9090 with availability zone support, an Azure Standard Load Balancer is required. To prevent a SKU mismatch, any public IP addresses associated with the virtual machines in the Standard Load Balancer's backend pool must be upgraded from Basic to Standard SKU.

Step-by-Step Solution

1
Analyze the Layer 7 requirements for HTTP/HTTPS routing and SSL/TLS termination.
Determine that Azure Application Gateway v2 is required because it supports URL-based path routing (/orders/* and /products/*), handles SSL/TLS termination, and provides zone redundancy.
Layer 7 inspection is necessary for URL routing, and v2 SKUs are required for availability zones.
2
Analyze the Layer 4 requirements for TCP traffic load balancing.
Determine that an Azure Standard Load Balancer is required to route TCP traffic on port 9090 with zone-redundancy support.
Standard SKU is required for availability zone support at Layer 4.
3
Identify SKU compatibility constraints for public IP addresses on the virtual machines.
Determine that the existing Basic SKU public IP addresses on the virtual machines must be upgraded to Standard SKU.
Azure does not allow mixing Basic SKU public IPs with Standard SKU load balancers or backend configurations, which would cause validation failures.

Key Concept

Designing regional application delivery solutions requires selecting the correct load balancing tier (Layer 4 vs Layer 7) and ensuring all associated resources, including virtual machine public IPs and load balancer SKUs, match to prevent configuration and deployment failures.
Rate this question

Topics

Application Load Balancing and Delivery

More questions from this topic