Examkin

Soru

Zorluk: OrtaApplication Load Balancing and Delivery

You are designing the networking architecture for an enterprise web application hosted on Azure Virtual Machines in the East US region. The design must meet the following requirements:
- Support Layer 7 load balancing with SSL/TLS termination and URL path-based routing (routing `/static/*` and `/api/*` to separate backend VM pools).
- Support internal Layer 4 load balancing of TCP traffic on port 8080 for backend synchronization.
- Ensure the entire architecture supports availability zones for high availability and regional resiliency.
- The virtual machines in the backend pools are currently configured with Basic SKU Public IP addresses.

Which two actions should you recommend to meet these requirements? (Select two.)

  1. Deploy Azure Application Gateway (Standard v2) to manage the HTTP/S traffic, handle SSL/TLS termination, and execute path-based routing.Cevap
  2. Upgrade the virtual machine Public IP addresses from Basic SKU to Standard SKU to allow them to be associated with an internal Azure Standard Load Balancer.Cevap
  3. C
    Deploy Azure Traffic Manager to perform SSL/TLS termination and execute path-based routing for the web application traffic.
  4. D
    Associate the existing virtual machines with Basic SKU Public IP addresses directly with an internal Azure Standard Load Balancer to handle the TCP traffic.

Cevap

Deploy Azure Application Gateway (Standard v2) to manage HTTP/S routing and upgrade the virtual machine Public IP addresses to Standard SKU to support an internal Azure Standard Load Balancer.
Deploying Azure Application Gateway (Standard v2) provides the required Layer 7 features (SSL termination, path-based routing) and supports availability zones. Upgrading the VM Public IP addresses from Basic to Standard SKU is necessary to allow them to connect to the internal Azure Standard Load Balancer for Layer 4 TCP traffic, ensuring SKU consistency and enabling availability zones.

Adım Adım Çözüm

1
Evaluate the Layer 7 requirements for SSL/TLS termination and URL path-based routing.
Select Azure Application Gateway (Standard v2) because it is a regional Layer 7 load balancer that natively supports SSL termination, path-based routing rules, and availability zones.
Alternative Layer 4 services or DNS-based routing cannot inspect HTTP/S paths or decrypt traffic for routing decisions.
2
Evaluate the Layer 4 requirements for internal TCP port 8080 traffic and availability zones.
Select an internal Azure Standard Load Balancer, as the Standard SKU is required to support zone redundancy.
Basic Load Balancers do not offer zone-redundancy features, making Standard Load Balancer the correct architectural choice.
3
Address resource SKU compatibility constraints.
Identify that the virtual machines currently utilize Basic SKU Public IP addresses. Recommend upgrading these Public IP addresses to Standard SKU to allow integration with the internal Standard Load Balancer.
Azure enforces SKU alignment. A Standard Load Balancer cannot serve backend virtual machines that are associated with Basic SKU Public IP addresses; attempting to do so results in a configuration mismatch error.

Anahtar Kavram

Azure load balancer SKU compatibility and Layer 7 vs Layer 4 routing capabilities
Tahmini Süre:2m 0s
Bu soruyu puanla

Konular

Application Load Balancing and Delivery

Bu konudan daha fazla soru