Examkin

Soru

Zorluk: OrtaApplication Load Balancing and Delivery

An enterprise is deploying a regional web application in the North Europe region. The backend pool consists of Azure Virtual Machines that require outbound internet connectivity via Standard SKU Public IP addresses. The application requirements are as follows:
- Route incoming HTTPS traffic based on URL path rules (e.g., routing `/orders/*` to a specific backend pool).
- Offload SSL/TLS decryption to the load balancer to reduce CPU load on the backend web servers.
- Keep all load balancing and traffic routing strictly within the local region to comply with data sovereignty regulations.
- Ensure compatibility between the load balancer SKU and the Standard SKU public IP configurations of the virtual machines.

Which load balancing solution should you recommend to meet these requirements?

  1. Azure Application Gateway (Standard v2)Cevap
  2. B
    Azure Traffic Manager
  3. C
    Azure Load Balancer (Basic SKU)
  4. D
    Azure Application Gateway (Basic SKU)

Cevap

Azure Application Gateway (Standard v2)
Azure Application Gateway (Standard v2) is the correct choice because it is a regional Layer 7 load balancer that supports URL path-based routing and SSL/TLS termination, and its Standard SKU is fully compatible with the Standard SKU Public IP configurations on the backend virtual machines.

Adım Adım Çözüm

1
Analyze protocol and routing requirements
The application requires Layer 7 features: HTTPS protocol support, SSL/TLS termination, and URL path-based routing (`/orders/*`). This eliminates Layer 4 load balancers (such as Azure Load Balancer) and DNS-based routing (such as Azure Traffic Manager) from being the primary solution for these requirements.
Layer 4 balancers only route traffic based on IP address and port, whereas Layer 7 gateways can inspect the HTTP/HTTPS request headers and paths.
2
Analyze geographic scope and data residency requirements
The solution must keep traffic routing strictly within the local region (North Europe) to comply with data sovereignty regulations. This rules out global services like Azure Front Door.
Azure Front Door is a global service that routes traffic across Microsoft's global edge network, which does not align with strict local regional routing requirements.
3
Evaluate SKU compatibility constraints
The backend virtual machines are configured with Standard SKU Public IP addresses. To prevent validation errors, the load balancer/gateway must support Standard SKU public IP configurations.
Azure resources require matching SKUs; mixing Basic SKU load balancers or gateways with Standard SKU public IP addresses on backend virtual machines causes deployment and connectivity failures.

Anahtar Kavram

Azure Application Gateway Standard v2 provides regional Layer 7 load balancing, SSL offloading, path-based routing, and compatibility with Standard SKU virtual network resources.
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Application Load Balancing and Delivery

Bu konudan daha fazla soru