An administrator is deploying an Azure Application Gateway v2 to load balance traffic for two secure web applications, `app1.contoso.com` and `app2.contoso.com`, which are hosted on virtual machines in a separate peered virtual network named `VNet-Backend`.
You must meet the following requirements:
- Incoming traffic to `https://app1.contoso.com/images/*` must be routed to a backend pool named `ImagePool`.
- All other traffic to `https://app1.contoso.com/*` must be routed to a backend pool named `App1Pool`.
- Incoming traffic to `https://app2.contoso.com/*` must be routed to a backend pool named `App2Pool`.
- HTTPS connections must be decrypted at the Application Gateway (SSL termination).
- The Application Gateway must be able to communicate with the Azure infrastructure and route traffic to the peered backend VMs.
Which configuration should you implement to satisfy these requirements?
- Configure two multi-site HTTPS listeners on port 443 (one for `app1.contoso.com` and one for `app2.contoso.com`), each with its own SSL certificate. Associate a path-based routing rule with the listener for `app1.contoso.com` to map `/images/*` to `ImagePool` and the default path to `App1Pool`. Associate a basic routing rule with the listener for `app2.contoso.com` to route traffic to `App2Pool`. Ensure the gateway subnet Network Security Group (NSG) allows inbound traffic on ports 65200-65535 from the `GatewayManager` service tag, and verify no User-Defined Route (UDR) redirects internet-bound traffic () to a virtual appliance.Cevap
- BConfigure two multi-site HTTPS listeners on port 443 (one for `app1.contoso.com` and one for `app2.contoso.com`), each with its own SSL certificate. Associate a path-based routing rule with the listener for `app1.contoso.com` to map `/images/*` to `ImagePool` and the default path to `App1Pool`. Associate a basic routing rule with the listener for `app2.contoso.com` to route traffic to `App2Pool`. Apply an Network Security Group (NSG) to the gateway subnet with a custom rule that denies all inbound traffic with a priority of 100 to secure the gateway from unauthorized public access.
- CConfigure two multi-site HTTPS listeners on port 443 (one for `app1.contoso.com` and one for `app2.contoso.com`), each with its own SSL certificate. Associate a path-based routing rule with the listener for `app1.contoso.com` to map `/images/*` to `ImagePool` and the default path to `App1Pool`. Associate a basic routing rule with the listener for `app2.contoso.com` to route traffic to `App2Pool`. Associate a route table to the gateway subnet containing a default route () with a next hop type of Virtual Appliance pointing to an Azure Firewall.
- DConfigure a single basic HTTPS listener on port 443 with a wildcard certificate. Create a path-based routing rule that maps path `/images/*` to `ImagePool`, `/app1/*` to `App1Pool`, and `/app2/*` to `App2Pool`. Rely on virtual network peering to allow the Application Gateway to route traffic to the backend VMs in `VNet-Backend` through a non-peered intermediate transit virtual network.