Question

Difficulty: EasyDesign Traffic Routing and Failover Strategies

A company is designing a disaster recovery and traffic routing solution for a global web application. The solution must meet the following requirements:

* Route HTTPS traffic globally with SSL termination at the routing layer.
* Provide a single connection-string listener endpoint that automatically routes to the active database during a database failover.
* Store static files in a geo-redundant storage account that allows read-only access to the secondary region.

Which set of Azure services and configurations should you recommend?

  1. Azure Front Door for global routing, Azure SQL Database auto-failover groups, and Read-Access Geo-Redundant Storage (RA-GRS)Answer
  2. B
    Azure Traffic Manager for global routing, Azure SQL Database auto-failover groups, and Read-Access Geo-Redundant Storage (RA-GRS)
  3. C
    Azure Front Door for global routing, manual geo-replication for Azure SQL Database, and Read-Access Geo-Redundant Storage (RA-GRS)
  4. D
    Azure Front Door for global routing, Azure SQL Database auto-failover groups, and Read-Access Geo-Redundant Storage (RA-GRS) configured to allow write operations directly to the secondary region

Answer

Azure Front Door for global routing, Azure SQL Database auto-failover groups, and Read-Access Geo-Redundant Storage (RA-GRS)
The correct answer combines Azure Front Door, Azure SQL Database auto-failover groups, and Read-Access Geo-Redundant Storage (RA-GRS). Azure Front Door functions at Layer 7 and is capable of terminating SSL sessions. Auto-failover groups manage database replication and host a single read-write listener that redirects to the active primary database instance automatically. RA-GRS ensures data is replicated to a secondary region while permitting read-only access to that secondary endpoint.

Step-by-Step Solution

1
Evaluate the global routing requirements for Layer 7 capabilities.
Identify that global SSL termination requires an Anycast-based Layer 7 load balancer like Azure Front Door rather than a DNS-based Layer 4 service like Traffic Manager.
Traffic Manager only handles DNS routing and cannot intercept HTTPS traffic to perform SSL decryption.
2
Determine the database failover solution.
Choose Azure SQL Database auto-failover groups to provide a single listener endpoint that automatically redirects traffic.
Manual geo-replication lacks a unified connection endpoint and requires application configuration changes during a failover.
3
Select the correct storage redundancy tier.
Select Read-Access Geo-Redundant Storage (RA-GRS).
RA-GRS keeps the primary region writeable while providing read-only endpoints in the secondary region for disaster recovery.

Key Concept

Selecting and combining Azure load balancing, database replication, and storage redundancy options based on application layer requirements and failover strategies.
Estimated Time:50s
Rate this question