Examkin

Design Infrastructure Solutions

360 soru

Tüm türler360Çoktan seçmeli189Çoklu seçim171
Soru 301Soru →

An enterprise is designing a regional application delivery and load balancing solution in the East US region. The architecture must support two workloads deployed on Azure Virtual Machines:

1. An HTTPS web application requiring SSL/TLS termination and URL path-based routing (routing `/images/*` and `/video/*` to separate backend pools).
2. A legacy database replication service that communicates using raw TCP on port 1433 and requires low-latency, high-throughput load balancing.

All virtual machines are configured with Standard SKU Public IP addresses for administrative access.

Which two Azure load balancing services should you include in the design to meet these requirements without validation failures? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Azure Application Gateway (Standard v2 SKU) to route the HTTPS web application traffic; Azure Load Balancer (Standard SKU) to route the legacy database replication traffic

Cevap

Azure Application Gateway (Standard v2 SKU) to handle the HTTPS web application traffic and Azure Load Balancer (Standard SKU) to handle the legacy database replication traffic.
The correct solution includes Azure Application Gateway (Standard v2 SKU) and Azure Load Balancer (Standard SKU). Azure Application Gateway operates at Layer 7, satisfying the requirements for SSL/TLS termination and URL path-based routing. Azure Load Balancer operates at Layer 4, satisfying the requirement for low-latency TCP routing on port 1433. The Standard SKU Load Balancer is required to ensure compatibility with the virtual machines' Standard SKU Public IP addresses.

Adım Adım Çözüm

1
Analyze Layer 7 requirements
The HTTPS web application requires SSL/TLS termination and URL path-based routing. These features require a Layer 7 load balancer.
Azure Application Gateway handles HTTP/HTTPS Layer 7 load balancing and URL path-based routing rules.
2
Analyze Layer 4 requirements
The legacy database replication service uses raw TCP on port 1433, which requires a Layer 4 load balancer.
Azure Load Balancer handles Layer 4 TCP/UDP traffic.
3
Check SKU constraints for the Layer 4 load balancer
Since the backend virtual machines use Standard SKU Public IP addresses, the Azure Load Balancer must also be the Standard SKU.
Mixing Basic and Standard SKUs in a virtual machine's network interface associations (such as Public IP and Load Balancer) is not supported and causes validation failures.

Anahtar Kavram

Selecting and combining Azure load balancing services based on layer capabilities (Layer 7 Application Gateway for HTTP/HTTPS routing vs. Layer 4 Load Balancer for non-HTTP TCP/UDP) and enforcing SKU alignment (Standard SKU) across public IPs and load balancers.
Soru 302Soru →

A company plans to migrate its on-premises customer relationship management (CRM) application, currently hosted on Hyper-V virtual machines, to Azure. The on-premises environment consists of the following components:
- Three web servers running IIS that communicate frequently with the database.
- A backend database server running SQL Server 2022 that relies heavily on SQL Server Agent jobs and cross-database queries.
- An identity structure where users authenticate against the local Active Directory Domain Services (AD DS). The company does not use smart cards and has no requirement for federated identity.

You need to design the migration assessment and target architecture to ensure zero disruption in database compatibility and identity integration, while also mapping server interdependencies.

Which two actions should you include in your recommendation? (Choose two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Recommend Azure SQL Managed Instance as the migration target for the SQL Server database to maintain support for cross-database queries and SQL Server Agent jobs.; Use Azure Migrate dependency analysis to map all network connections and interdependencies for the Hyper-V virtual machines before planning the migration groups.

Cevap

Recommending Azure SQL Managed Instance ensures compatibility for cross-database queries and SQL Server Agent jobs. Utilizing Azure Migrate dependency analysis maps VM dependencies to prevent network latency and disconnects during migration.
Selecting Azure SQL Managed Instance ensures compatibility for cross-database queries and SQL Server Agent jobs. Performing dependency analysis in Azure Migrate identifies all interconnected application components to ensure a seamless migration without network disconnects.

Adım Adım Çözüm

1
Analyze database feature requirements
Identify that the backend SQL Server requires cross-database queries and SQL Server Agent jobs.
This constraints the target relational database service options in Azure.
2
Evaluate Azure SQL migration targets
Select Azure SQL Managed Instance because it supports instance-level features like SQL Server Agent and cross-database queries, whereas Azure SQL Database single database does not.
To ensure database compatibility without modifying application code.
3
Evaluate VM assessment strategy
Run dependency analysis within Azure Migrate to identify network communication between the IIS web servers and the backend database.
To prevent high latency or connection loss by keeping dependent VMs in the same migration group.
4
Evaluate identity requirements
Rule out AD FS as the primary recommendation since there is no requirement for federation, meaning a simpler sync mechanism like Microsoft Entra Connect with PHS is optimal.
To reduce design complexity and operational overhead.

Anahtar Kavram

Azure Migrate dependency mapping and database target alignment based on legacy SQL feature dependencies.
Soru 303Soru →

A digital media company is designing the Azure compute infrastructure for a new video rendering and encoding platform. The platform consists of two main components:

1. An orchestration portal that manages rendering jobs, user profiles, and subscription details. This portal represents a steady-state production workload and requires a 99.9%99.9\% availability SLA.
2. A batch processing layer containing multiple worker instances that execute the CPU-intensive rendering tasks. These tasks write progress checkpoints to Azure Blob Storage, allowing interrupted jobs to resume from the last checkpoint.

You need to minimize compute costs for both layers while meeting the availability requirements.

Which two Azure compute configurations should you recommend?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Azure Spot Virtual Machines to host the batch processing worker instances; Standard Azure Virtual Machines combined with Azure Reserved Virtual Machine Instances to host the orchestration portal

Cevap

Azure Spot Virtual Machines to host the batch processing worker instances, and Standard Azure Virtual Machines combined with Azure Reserved Virtual Machine Instances to host the orchestration portal.
The correct configurations align the workload requirements with the appropriate Azure compute features. The rendering workers write progress checkpoints and can tolerate interruption, making them ideal candidates for the cost-effective Azure Spot VMs. Conversely, the orchestration portal represents a steady-state production workload with a 99.9%99.9\% SLA constraint, requiring standard VM instances. Applying Azure Reserved Instances to these standard VMs is the correct way to reduce costs without risking eviction.

Adım Adım Çözüm

1
Analyze the workload characteristics and SLA requirements for the orchestration portal.
The orchestration portal requires a steady-state production environment with a 99.9%99.9\% availability SLA, meaning it cannot tolerate evictions.
This rules out Spot VMs for this layer and necessitates standard VMs. Since it is a steady-state, predictable workload, Azure Reserved Virtual Machine Instances should be used to minimize costs.
2
Analyze the workload characteristics and fault tolerance of the batch processing layer.
The rendering workers perform CPU-intensive tasks that checkpoint progress and can tolerate interruptions.
Because the workload is interruptible, Azure Spot VMs are the most cost-effective option, offering up to a 90%90\% discount compared to pay-as-you-go rates.
3
Evaluate high availability design for the orchestration portal.
Deploying VMs across multiple Availability Zones or using zone-redundant VMSS configurations is required for resiliency against zone outages.
Placing all VMs in a single Availability Zone exposes the application to zone-level failures, which does not align with best practices for high availability.

Anahtar Kavram

Selecting cost-effective and resilient Azure compute solutions based on workload characteristics, SLA requirements, and fault tolerance.
Soru 304Soru →

An enterprise is designing a hub-and-spoke virtual network topology in Azure. The hub virtual network, `vnet-hub-eastus` (10.10.0.0/1610.10.0.0/16), hosts an Azure Firewall with the private IP address 10.10.1.410.10.1.4. A spoke virtual network, `vnet-prod-spoke` (10.20.0.0/1610.20.0.0/16), is peered with the hub virtual network. The enterprise has multiple other spoke virtual networks deployed within the 10.0.0.0/810.0.0.0/8 address space.

You need to design a routing solution for `vnet-prod-spoke` that meets the following requirements:
- All traffic destined for the internet must be inspected by the Azure Firewall.
- All traffic destined for other spoke virtual networks within the 10.0.0.0/810.0.0.0/8 range must be inspected by the Azure Firewall.
- Traffic between subnets within `vnet-prod-spoke` must route directly between the subnets and bypass the firewall.

Which two routing configurations should you implement in the user-defined route (UDR) table associated with the subnets in `vnet-prod-spoke`? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: A route for 0.0.0.0/00.0.0.0/0 with the next hop set to the Virtual Appliance IP address 10.10.1.410.10.1.4; A route for 10.0.0.0/810.0.0.0/8 with the next hop set to the Virtual Appliance IP address 10.10.1.410.10.1.4

Cevap

The correct configurations are to add a route for 0.0.0.0/00.0.0.0/0 pointing to the Azure Firewall private IP address, and a route for 10.0.0.0/810.0.0.0/8 pointing to the Azure Firewall private IP address.
To inspect internet-bound traffic, a default route for 0.0.0.0/00.0.0.0/0 must point to the Azure Firewall private IP address. To inspect spoke-to-spoke traffic without routing internal spoke traffic to the firewall, a user-defined route for the wider 10.0.0.0/810.0.0.0/8 prefix pointing to the firewall is used. Azure's Longest Prefix Match routing algorithm ensures that local spoke traffic destined for the 10.20.0.0/1610.20.0.0/16 range matches the more specific system route (10.20.0.0/1610.20.0.0/16 -> Virtual Network) rather than the custom route, allowing local traffic to bypass the firewall.

Adım Adım Çözüm

1
Analyze the traffic requirements and routing precedence in Azure.
Azure routes traffic using the Longest Prefix Match (LPM) algorithm. User-defined routes (UDRs) override system routes of the same prefix length, but a more specific system route will still take precedence over a less specific UDR.
Understanding LPM is critical to designing routes that selectively intercept traffic without overriding necessary local traffic paths.
2
Evaluate the configuration for internet-bound traffic.
A default route (0.0.0.0/00.0.0.0/0) pointing to the Azure Firewall (10.10.1.410.10.1.4) is required to direct all outbound internet traffic to the hub for inspection.
This satisfies the requirement to inspect all internet-bound traffic.
3
Evaluate the configuration for spoke-to-spoke traffic while preserving local routing.
A route for 10.0.0.0/810.0.0.0/8 pointing to the Azure Firewall (10.10.1.410.10.1.4) directs traffic destined for other virtual networks in that range to the firewall. Since the local spoke virtual network system route (10.20.0.0/1610.20.0.0/16) has a longer prefix length than 10.0.0.0/810.0.0.0/8, intra-spoke traffic continues to use the system local route, bypassing the firewall.
This satisfies both the spoke-to-spoke inspection requirement and the local spoke bypass requirement.

Anahtar Kavram

Azure routing priority and Longest Prefix Match (LPM) interaction with User Defined Routes (UDR).
Tahmini Süre:2m 0s
Soru 305Soru →

An organization is planning to migrate an on-premises retail inventory system hosted on a VMware vSphere environment to Azure. The system consists of five web servers and a cluster of database servers. A strict security policy prohibits the installation of any software agents on the virtual machines during the assessment phase. You need to use Azure Migrate to discover the virtual machines, map their network dependencies, and assess their readiness for Azure.

Which two actions should you include in the assessment strategy? Choose two.

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Deploy the Azure Migrate appliance as a VMware Open Virtualization Appliance (OVA) template on-premises.; Enable agentless dependency analysis and add guest operating system credentials to the Azure Migrate appliance.

Cevap

Deploy the Azure Migrate appliance as a VMware Open Virtualization Appliance (OVA) template on-premises and enable agentless dependency analysis by adding guest operating system credentials to the Azure Migrate appliance.
Deploying the Azure Migrate appliance as a VMware Open Virtualization Appliance (OVA) template is the standard, agentless way to discover virtual machines on VMware vSphere. To analyze network dependencies without software agents, agentless dependency analysis must be configured. This requires adding guest operating system credentials to the Azure Migrate appliance so that it can query network connections via VMware Tools APIs.

Adım Adım Çözüm

1
Analyze constraints and requirements.
Identified VMware vSphere hypervisor, requirement for agentless discovery, and requirement for dependency mapping without VM agents.
This establishes that only agentless mechanisms supported by Azure Migrate for VMware can be used.
2
Select the discovery method.
Choose the Azure Migrate appliance deployed via an OVA template.
The VMware OVA template is the standard, agentless method to deploy the Azure Migrate appliance in vSphere environments.
3
Select the dependency analysis method.
Choose agentless dependency analysis with VM guest credentials configured in the appliance.
Agentless dependency analysis uses VMware Tools and guest OS credentials to discover active network connections without installing agents on the VMs.

Anahtar Kavram

Azure Migrate agentless discovery and dependency mapping for VMware environments
Soru 306Soru →

A smart-grid utility provider is designing a telemetry ingestion system in the West US 3 region to collect real-time status updates from smart meters using a custom TCP protocol on port 8080. The design must satisfy the following requirements:
- Distribute incoming TCP traffic on port 8080 across a backend pool of virtual machines.
- Support high availability with zone-redundancy across three availability zones.
- Support the existing backend virtual machines, which currently have Basic SKU Public IP addresses assigned to their network interfaces.

Which of the following actions should you recommend to meet these requirements?

Cevabı ve açıklamayı göster

Cevap: Upgrade the virtual machines' public IP addresses to Standard SKU (or remove them), and deploy a Standard Load Balancer to distribute the TCP traffic.

Cevap

Upgrade the virtual machines' public IP addresses to Standard SKU (or remove them), and deploy a Standard Load Balancer to distribute the TCP traffic.
To support zone-redundancy across three availability zones, Azure Standard Load Balancer must be used because Basic Load Balancer is not zone-aware. However, Azure networking rules state that you cannot mix Basic and Standard SKU resources on the same virtual machine network interface. Therefore, the existing Basic SKU public IP addresses must be upgraded to Standard SKU (or removed) before the virtual machines can join the Standard Load Balancer backend pool.

Adım Adım Çözüm

1
Identify the protocol and zonal requirements.
The application requires regional load balancing for custom TCP traffic on port 8080 across three availability zones.
Azure Standard Load Balancer supports Layer 4 TCP/UDP protocols and offers zone-redundant frontend configurations, whereas Basic Load Balancer is not zone-aware.
2
Check the SKU constraints for the public IP addresses on the backend virtual machines.
The existing virtual machines have Basic SKU Public IPs, which cannot be mixed with a Standard Load Balancer backend pool.
Azure enforces SKU consistency: a virtual machine network interface associated with a Standard Load Balancer backend pool cannot have Basic SKU public IP addresses.
3
Select the correct upgrade path to resolve the SKU conflict.
Upgrade the public IPs to Standard SKU or remove them, and deploy the Standard Load Balancer.
This resolves the SKU mismatch validation error while enabling the Standard Load Balancer to provide zone-redundancy.

Anahtar Kavram

Azure Load Balancer SKU alignment and zone-redundancy constraints
Soru 307Soru →

An energy utility company is designing the Azure compute infrastructure for two distinct workloads:

* Workload 1: A smart-meter telemetry ingestion service that runs 24/7, requires a 99.99% availability SLA, and must allow individual virtual machines to be patched and managed independently.
* Workload 2: A monthly billing simulation report that takes 6 hours to run, can tolerate interruptions, and must be completed at the lowest possible compute cost.

Which two virtual machine configurations should you recommend to meet these requirements?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Deploy virtual machines using Virtual Machine Scale Sets in Flexible orchestration mode across multiple Availability Zones for Workload 1.; Deploy virtual machines as Azure Spot Virtual Machines for Workload 2.

Cevap

To meet the requirements, the smart-meter telemetry service should be deployed using Virtual Machine Scale Sets in Flexible orchestration mode across multiple Availability Zones, and the billing simulation report should be run on Azure Spot Virtual Machines.
The telemetry ingestion service requires a 99.99% SLA, which can only be achieved by distributing instances across multiple Availability Zones. Flexible orchestration mode provides the ability to manage, patch, and control individual virtual machines independently, which satisfies the operational requirement. The billing simulation workload is interruptible and cost-sensitive, making Azure Spot VMs the most appropriate and cost-effective solution.

Adım Adım Çözüm

1
Analyze the availability and management requirements for the smart-meter telemetry service.
The workload requires a 99.99% availability SLA and individual virtual machine management.
Determining the high availability and orchestration requirements helps select the correct deployment model.
2
Determine the optimal high availability deployment option for the telemetry service.
Multiple Availability Zones are required to achieve the 99.99% SLA, and Flexible orchestration mode is required for individual virtual machine control.
Uniform orchestration mode does not allow the same level of granular management for individual virtual machines, and a single availability zone only offers a 99.95% SLA.
3
Analyze the cost and interruption tolerance for the billing simulation report.
The workload is interruptible, runs for a limited time, and must minimize costs.
This determines whether discounted, non-guaranteed compute options like Spot VMs can be utilized.
4
Select the compute model for the billing simulation.
Azure Spot VMs are the most cost-effective option for non-critical, interruptible batch processing.
Spot VMs offer up to a 90% discount compared to pay-as-you-go rates, satisfying the budget constraint since the workload can tolerate evictions.

Anahtar Kavram

Designing highly available, cost-effective compute solutions using Virtual Machine Scale Sets and Azure Spot VMs based on application SLA and interruption tolerance.
Soru 308Soru →

A company is planning to migrate a legacy inventory application to Azure. The application's frontend web tier runs on VMware vSphere virtual machines, while its backend Microsoft SQL Server database runs on a dedicated physical Windows server cluster. The SQL Server database relies on cross-database queries and SQL Server Agent jobs. All servers are located in a secure network zone with no direct internet access, but they can route traffic through an outbound HTTPS proxy. You need to design an Azure Migrate assessment to map the application's network dependencies and determine the correct target database tier in Azure. Which two actions should you include in the assessment design? (Choose two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Install the Azure Monitor Agent and the Dependency Agent on the physical SQL Server machines to map dependencies.; Assess the SQL Server database for migration to Azure SQL Managed Instance.

Cevap

Installing the Azure Monitor Agent and Dependency Agent on the physical SQL Server machines to map dependencies, and assessing the SQL Server workload for migration to Azure SQL Managed Instance.
The correct strategy involves installing the Azure Monitor Agent and Dependency Agent on the physical servers, and assessing the SQL database for migration to Azure SQL Managed Instance. Physical servers do not support agentless dependency analysis in Azure Migrate, making the installation of agents necessary to map dependencies. Additionally, because the legacy database relies on SQL Server Agent jobs and cross-database queries, it must be migrated to Azure SQL Managed Instance, as Azure SQL Database does not support these features.

Adım Adım Çözüm

1
Analyze the database requirements.
Identify that the database relies on cross-database queries and SQL Server Agent jobs.
These features dictate which Azure SQL database service tier must be selected for compatibility.
2
Select the appropriate Azure SQL service tier.
Determine that Azure SQL Managed Instance is the required target database tier.
Azure SQL Database single database and elastic pools do not support SQL Server Agent or cross-database queries, making Azure SQL Managed Instance the minimum compatible fully managed tier.
3
Analyze the virtualization environment for dependency mapping.
Identify that the database runs on physical servers, whereas the web tier runs on VMware VMs.
Azure Migrate has different dependency mapping capabilities depending on whether the source server is a virtual machine or a physical server.
4
Determine the dependency mapping method for the physical servers.
Select agent-based dependency mapping by installing the Azure Monitor Agent and Dependency Agent.
Azure Migrate does not support agentless dependency mapping for physical servers; agentless mapping is restricted to VMware and Hyper-V VMs.

Anahtar Kavram

Designing a migration assessment strategy that accounts for physical server dependency mapping limitations and database platform feature compatibility.
Tahmini Süre:2m 30s
Soru 309Soru →

A company is designing a hub-and-spoke virtual network topology in Azure. The hub virtual network, `vnet-hub-prod` (172.30.0.0/16172.30.0.0/16), contains an Azure Firewall (172.30.0.4172.30.0.4) and a Virtual Network Gateway that connects to an on-premises network via ExpressRoute. The spoke virtual network, `vnet-spoke-app` (10.80.0.0/1610.80.0.0/16), contains a subnet named `snet-web` (10.80.1.0/2410.80.1.0/24) and is peered with `vnet-hub-prod` with gateway transit enabled. The on-premises network advertises the prefix 10.200.0.0/1610.200.0.0/16 via BGP. To comply with security policies, all traffic from `snet-web` to the on-premises network must be inspected by the Azure Firewall. An architect associates a route table with `snet-web` and adds a User Defined Route (UDR) for 10.0.0.0/810.0.0.0/8 pointing to the Azure Firewall. However, during testing, traffic from `snet-web` to the on-premises network bypasses the firewall and is routed directly to the gateway. Which of the following actions should the architect take to resolve this issue?

Cevabı ve açıklamayı göster

Cevap: Disable virtual network gateway route propagation on the route table associated with `snet-web`.

Cevap

Disable virtual network gateway route propagation on the route table associated with the spoke subnet.
Disabling route propagation on the route table associated with the spoke subnet prevents the Virtual Network Gateway from injecting the on-premises BGP-learned routes (such as the specific 10.200.0.0/1610.200.0.0/16 prefix) into the subnet's routing table. In Azure, User Defined Routes (UDRs) take precedence over system routes and BGP routes only if their prefixes are identical or if the UDR has a longer prefix match. Since the propagated route (10.200.0.0/1610.200.0.0/16) is more specific than the UDR (10.0.0.0/810.0.0.0/8), the traffic matches the BGP route and bypasses the firewall. Disabling route propagation removes the 10.200.0.0/1610.200.0.0/16 route, causing the traffic to fall back to the 10.0.0.0/810.0.0.0/8 UDR, which successfully routes it through the Azure Firewall.

Adım Adım Çözüm

1
Analyze how the routing table for the subnet determines the next hop.
Azure uses Longest Prefix Match (LPM) to choose routes. Currently, the subnet table contains a BGP-propagated route for 10.200.0.0/1610.200.0.0/16 (next hop: Gateway) and a UDR for 10.0.0.0/810.0.0.0/8 (next hop: Virtual Appliance).
Understanding why the traffic bypasses the firewall is necessary to identify the corrective action.
2
Evaluate the match priority of the destination IP addresses.
Since 10.200.0.0/1610.200.0.0/16 is a longer prefix match than 10.0.0.0/810.0.0.0/8, traffic destined for on-premises matches the BGP-learned route and bypasses the UDR pointing to the firewall.
This identifies that BGP route propagation is introducing a more specific prefix that overrides the security intent of the UDR.
3
Select the configuration change that removes the specific BGP routes from the spoke subnet.
Disabling gateway route propagation on the route table removes the 10.200.0.0/1610.200.0.0/16 route from the subnet's routing table, forcing the traffic to match the 10.0.0.0/810.0.0.0/8 UDR and flow to the firewall.
Disabling route propagation allows the broader UDR to take effect for the on-premises range without having to define manual UDRs for every propagated prefix.

Anahtar Kavram

Azure routing priority, Longest Prefix Match (LPM), and Gateway Route Propagation
Tahmini Süre:2m 0s
Soru 310Soru →

A logistics enterprise plans to migrate a multi-tier distribution application from an on-premises VMware vSphere environment to Azure. You need to design an Azure Migrate assessment strategy that maps network dependencies between the virtual machines to determine optimal migration waves. The enterprise security policy imposes the following constraints:
- No software agents can be installed on the application virtual machines.
- The use of domain administrator or root credentials for guest operating system access is strictly prohibited.

Which dependency mapping strategy should you recommend?

Cevabı ve açıklamayı göster

Cevap: Configure agentless dependency analysis in Azure Migrate by utilizing guest operating system credentials that have standard user permissions or non-root SSH access.

Cevap

Configure agentless dependency analysis in Azure Migrate by utilizing guest operating system credentials that have standard user permissions or non-root SSH access.
The correct option is to use agentless dependency analysis in Azure Migrate using standard guest operating system credentials with minimum privileges. Azure Migrate agentless dependency analysis for VMware VMs does not install any agents on the virtual machines. For Windows, it can use a local or domain user account with standard permissions (granted WMI/COM access), and for Linux, it can use a standard user account with SSH access, satisfying both security constraints.

Adım Adım Çözüm

1
Analyze the security constraints regarding agent installation and credential access permissions.
Identified that any solution requiring VM-level agents or domain administrator/root credentials must be excluded.
Ensures design compliance with enterprise security requirements.
2
Evaluate Azure Migrate dependency mapping capabilities for VMware vSphere virtual machines.
Agentless dependency analysis is selected since it does not install agents and retrieves network connection data via the hypervisor and guest OS APIs.
Allows mapping of dependencies without software footprint on the target VMs.
3
Determine the minimum privilege requirements for guest OS access in agentless dependency analysis.
Confirmed that Windows virtual machines require either local/domain administrator or a standard user with specific WMI/COM permissions, and Linux virtual machines require a standard user with SSH access (no root required).
Meets the constraint forbidding domain administrator and root accounts.

Anahtar Kavram

Azure Migrate agentless dependency analysis for VMware workloads allows mapping network connections without VM agents or highly privileged guest OS credentials (domain admin/root).
Tahmini Süre:1m 30s
Soru 311Soru →

A national education board is designing the application delivery and load balancing architecture for its regional virtual learning management system (LMS) in the East US region. The virtual machines (VMs) hosting the system are deployed across multiple Availability Zones to ensure high availability. The architecture must satisfy the following requirements:
1. Distribute incoming UDP-based video streaming traffic across the backend VMs.
2. Route HTTPS-based web portal traffic, including offloading SSL/TLS termination and routing requests with the path '/assignments/*' to a dedicated virtual machine scale set.
3. The backend virtual machines currently have Basic SKU Public IP addresses associated with their network interfaces for direct administrative access.

Which two of the following components and configurations should you include in the design to meet these requirements?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: An Azure Application Gateway (Standard v2 SKU) to handle the HTTPS-based web portal traffic and route requests based on URL paths.; An Azure Load Balancer (Standard SKU) to distribute the UDP-based streaming traffic, after upgrading the virtual machines' Public IP addresses to Standard SKU.

Cevap

An Azure Application Gateway (Standard v2 SKU) to handle HTTPS-based web portal traffic and route requests based on URL paths, and an Azure Load Balancer (Standard SKU) to distribute UDP-based streaming traffic after upgrading the virtual machines' Public IP addresses to Standard SKU.
The correct architecture uses an Azure Application Gateway (Standard v2 SKU) to handle the HTTPS-based web portal traffic because it operates at Layer 7, providing path-based routing and SSL termination. It also uses a Standard Azure Load Balancer to distribute the UDP-based streaming traffic. Since the VMs are deployed across multiple Availability Zones, the Standard Load Balancer is required (as Basic Load Balancer does not support Availability Zones). To avoid SKU mismatch validation failures, the virtual machines' existing Basic SKU Public IPs must be upgraded to Standard SKU.

Adım Adım Çözüm

1
Analyze protocol and routing requirements for the web portal.
The web portal requires HTTPS routing, SSL termination, and path-based routing (e.g., routing `/assignments/*` to a dedicated VM scale set). Since these are Layer 7 application routing capabilities, Azure Application Gateway is the correct resource.
Azure Application Gateway operates at Layer 7 and supports SSL offloading and path-based routing rules.
2
Analyze protocol requirements for the live video streaming.
The video streaming uses UDP. This requires a Layer 4 load balancer. Azure Load Balancer supports TCP and UDP traffic.
Azure Load Balancer operates at Layer 4 and can distribute non-HTTP/S traffic like UDP.
3
Verify SKU compatibility and Availability Zone requirements.
The virtual machines are deployed across multiple Availability Zones, which requires the Standard SKU of Azure Load Balancer. However, Standard Load Balancer backend pools only support Standard SKU resources. The virtual machines' network interfaces currently have Basic SKU Public IP addresses, which causes a validation error due to SKU mismatch.
To use Standard Load Balancer, all associated Public IP addresses on the virtual machines' network interfaces must be upgraded from Basic SKU to Standard SKU.

Anahtar Kavram

Application Load Balancing and Delivery
Tahmini Süre:2m 0s
Soru 312Soru →

An organization plans to migrate a legacy line-of-business (LOB) application currently running on on-premises physical bare-metal servers to Azure Virtual Machines. The application has multiple undocumented network connections to other local servers. The organization needs to map these dependencies before scheduling the migration. Additionally, you must design a hybrid identity solution to synchronize on-premises user accounts to Microsoft Entra ID while minimizing operational overhead and ensuring that user passwords can be managed on-premises. Which two actions should you include in the migration assessment and strategy? (Choose two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Install the Azure Monitor agent and the Dependency agent on each physical server.; Configure Microsoft Entra Connect with Password Hash Synchronization (PHS).

Cevap

To successfully perform the migration assessment and design the identity solution, you must install the Azure Monitor agent and the Dependency agent on each physical server, and configure Microsoft Entra Connect with Password Hash Synchronization (PHS).
Installing the Azure Monitor agent and the Dependency agent is correct because physical bare-metal servers do not support agentless dependency analysis in Azure Migrate, making the agent-based approach necessary. Configuring Microsoft Entra Connect with Password Hash Synchronization (PHS) is correct because it synchronizes user accounts and passwords to the cloud with the least operational overhead, avoiding the maintenance costs of dedicated federation infrastructure.

Adım Adım Çözüm

1
Determine the dependency analysis method for physical bare-metal servers.
Since agentless dependency analysis is not supported for physical servers in Azure Migrate, agent-based dependency analysis must be used.
Agent-based dependency analysis requires installing the Azure Monitor agent (or Log Analytics agent) and the Dependency agent on each server to map TCP connections.
2
Select the hybrid identity mechanism that satisfies constraints.
Password Hash Synchronization (PHS) is selected as it synchronizes identities, enforces on-premises policies, and has the lowest operational overhead compared to Pass-through Authentication (PTA) or AD FS.
Active Directory Federation Services (AD FS) is rejected because it introduces high infrastructure complexity and administrative overhead.

Anahtar Kavram

Azure Migrate dependency analysis methods vary by platform; physical servers require agent-based mapping, while hybrid identity designs should prioritize Password Hash Synchronization (PHS) over AD FS for lower operational overhead unless federation is explicitly required.
Soru 313Soru →

A healthcare provider is designing the regional application delivery and load balancing architecture in East US 2 for a new clinical portal. The solution must meet the following requirements:
- The public-facing web application requires SSL/TLS termination and path-based routing (traffic for `/patients/*` and `/staff/*` must be routed to separate backend pools).
- The database synchronization layer requires high-throughput TCP connections on custom port 50005000.
- All database virtual machines currently use Basic SKU Public IP addresses for administration.
- To comply with strict data sovereignty regulations, all load balancing and traffic routing components must reside entirely within the East US 2 region.

Which load balancing configuration should you recommend?

Cevabı ve açıklamayı göster

Cevap: Deploy an Azure Application Gateway (Standard v2) for the web application, deploy an Azure Standard Load Balancer for the database layer, and upgrade the database virtual machines' public IP addresses to the Standard SKU.

Cevap

Deploy an Azure Application Gateway (Standard v2) for the web application, deploy an Azure Standard Load Balancer for the database layer, and upgrade the database virtual machines' public IP addresses to the Standard SKU.
The correct configuration uses Azure Application Gateway (Standard v2) to satisfy the layer-7 features (SSL/TLS termination and path-based routing) for the web application. It uses Azure Standard Load Balancer to load balance the custom TCP traffic on port 50005000 for the database layer. Finally, it upgrades the database virtual machines' public IP addresses to the Standard SKU to resolve the SKU mismatch validation error that occurs when mixing Basic SKU public IPs with a Standard Load Balancer.

Adım Adım Çözüm

1
Analyze the web application requirements.
The web application requires SSL/TLS termination and regional path-based routing (`/patients/*` and `/staff/*`), which requires a regional layer-7 load balancer like Azure Application Gateway.
Azure Application Gateway operates at layer 7 and supports SSL offloading and URL-based routing rules.
2
Analyze the database synchronization requirements.
The database layer requires high-throughput TCP load balancing on port 50005000, which requires a regional layer-4 load balancer like Azure Standard Load Balancer.
Azure Standard Load Balancer provides low-latency, high-throughput Layer 4 load balancing for TCP/UDP protocols on arbitrary ports.
3
Verify SKU compatibility requirements.
The database virtual machines' public IP addresses must be upgraded from Basic to Standard SKU.
Azure Standard Load Balancer requires all backend network interfaces to have Standard SKU public IPs (or no public IPs). Mixing Basic and Standard SKUs in this load balancer configuration is not supported.

Anahtar Kavram

Selecting and configuring regional Azure load balancing services (Application Gateway and Standard Load Balancer) while ensuring SKU compatibility for backend pools.
Soru 314Soru →

A pharmaceutical company is designing the Azure compute infrastructure to host a molecular modeling simulation application. The simulations run continuously for up to 72 hours. If a virtual machine is interrupted or terminated during a run, the progress is lost, and the entire simulation must restart from the beginning. The application requires high-performance CPU capabilities and low-latency node-to-node communication. The finance team recommends using Azure Spot virtual machines to minimize compute costs. Which compute virtualization strategy should you recommend to meet the requirements of the simulation application?

Cevabı ve açıklamayı göster

Cevap: Deploy the simulation application on standard H-series virtual machines.

Cevap

Deploy the simulation application on standard H-series virtual machines.
Deploying the simulation application on standard H-series virtual machines is the correct strategy because H-series virtual machines are optimized for High-Performance Computing (HPC) workloads, providing the necessary CPU performance and low-latency InfiniBand networking. Standard VMs do not have an eviction policy, guaranteeing that the 72-hour simulation runs will complete without interruption.

Adım Adım Çözüm

1
Analyze the workload characteristics and requirements.
The application requires continuous execution for up to 72 hours with no tolerance for interruption, high-performance CPU, and low-latency node-to-node communication.
Identifying these constraints helps filter out compute options that fail to meet availability and performance needs.
2
Evaluate the suitability of Azure Spot VMs.
Spot VMs are rejected because they are subject to sudden eviction, which violates the requirement for uninterrupted 72-hour execution.
Using Spot VMs for critical production or long-running stateful workloads leads to high failure rates due to capacity reclaim.
3
Evaluate the suitability of Azure Functions on a Consumption plan.
Azure Functions are rejected due to the 10-minute maximum execution timeout limit.
Serverless consumption plans are designed for short-lived, event-driven tasks rather than multi-day simulations.
4
Select the appropriate VM series and purchasing option.
Standard H-series VMs are selected because H-series is optimized for HPC (providing InfiniBand networking) and standard pricing ensures no eviction.
This configuration satisfies both the physical networking requirement and the strict availability constraint.

Anahtar Kavram

Selecting Azure VM series and pricing tiers based on performance, network latency, and availability constraints.
Tahmini Süre:1m 30s
Soru 315Soru →

A cloud architect is planning a secure Azure network topology for a multi-tier application environment. The infrastructure consists of:

- A hub virtual network named `vnet-transit-hub-weur` (10.240.0.0/1610.240.0.0/16) hosting an Azure Firewall (10.240.1.410.240.1.4) in `AzureFirewallSubnet` and an Azure Virtual Network Gateway in `GatewaySubnet`.
- A production application spoke virtual network named `vnet-prod-app-weur` (10.241.0.0/1610.241.0.0/16).
- A shared database spoke virtual network named `vnet-shared-db-weur` (10.242.0.0/1610.242.0.0/16).
- Virtual network peering connections linking the hub to each spoke virtual network.

The design must satisfy the following requirements:
- All traffic between `vnet-prod-app-weur` and `vnet-shared-db-weur` must pass through the Azure Firewall for inspection.
- VMs in both spokes must maintain access to the on-premises datacenter via the central Virtual Network Gateway.
- Local traffic within each spoke virtual network must remain local and bypass the hub.

Which two configurations should the architect recommend to satisfy these requirements? (Select two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Associate a route table with the subnets in `vnet-prod-app-weur` that contains a route for 10.242.0.0/1610.242.0.0/16 with the next hop set to the Azure Firewall private IP address.; Enable gateway transit on the virtual network peering settings for `vnet-transit-hub-weur`, and configure both spoke virtual networks to use the remote virtual network's gateway.

Cevap

The correct configurations are to associate a route table with the subnets in the production spoke containing a route for the database spoke's IP range pointing to the Azure Firewall, and to configure virtual network peering to allow gateway transit on the hub while configuring the spokes to use the remote gateway.
To route traffic between the spokes through the hub firewall, a user-defined route (UDR) must be added to the spoke subnets. The route in the production spoke must target the database spoke address space (10.242.0.0/1610.242.0.0/16) and use the Azure Firewall (10.240.1.410.240.1.4) as the next hop. To enable spoke traffic to reach the on-premises network, virtual network peering gateway transit must be configured. This requires enabling gateway transit on the hub peering and configuring the spoke peerings to use the remote virtual network's gateway.

Adım Adım Çözüm

1
Determine the required route for spoke-to-spoke traffic.
A route for the destination spoke (10.242.0.0/1610.242.0.0/16) pointing to the Azure Firewall (10.240.1.410.240.1.4) must be added to the source spoke's subnet.
By default, Azure peerings do not transitively route spoke-to-spoke traffic. User-defined routes are required to redirect destination traffic through the hub firewall.
2
Ensure local subnet routing is preserved.
Avoid defining routes that match the local virtual network's address space (10.241.0.0/1610.241.0.0/16 on the production spoke, or 10.242.0.0/1610.242.0.0/16 on the database spoke).
Routing the local prefix to a virtual appliance overrides the default local system route, disrupting intra-VNet and intra-subnet communication.
3
Configure gateway sharing across peerings.
Select 'Allow gateway transit' on the hub virtual network peering and 'Use the remote virtual network's gateway or Route Server' on the spoke side peerings.
This allows VMs in the spoke virtual networks to leverage the Virtual Network Gateway in the hub for hybrid connectivity.

Anahtar Kavram

Configuring User-Defined Routes (UDRs) and Peering Gateway Transit in Azure Hub-and-Spoke Topologies
Tahmini Süre:2m 0s
Soru 316Soru →

An organization is designing a regional web application hosted on Azure Virtual Machines in the West US region. The architecture must satisfy the following requirements:
- Provide URL path-based routing to direct traffic to different backend pools.
- Support SSL/TLS termination at the load balancer.
- Ensure that the backend virtual machines are not accessible from the public internet.
The existing virtual machines are currently configured with Basic SKU Public IP addresses.

Which load balancing configuration should you recommend to meet the requirements?

Cevabı ve açıklamayı göster

Cevap: Remove the Basic SKU Public IP addresses from the virtual machines and deploy Azure Application Gateway.

Cevap

Remove the Basic SKU Public IP addresses from the virtual machines and deploy Azure Application Gateway.
The correct option is to remove the Basic SKU Public IP addresses and deploy Azure Application Gateway. Azure Application Gateway is a regional Layer 7 load balancer that supports URL path-based routing and SSL/TLS termination. It interacts with the backend virtual machines using their private IP addresses, which allows the public IP addresses to be removed from the virtual machines, ensuring they are not directly exposed to the public internet.

Adım Adım Çözüm

1
Analyze the application requirements.
The requirements demand Layer 7 capabilities: URL path-based routing and SSL/TLS termination.
These capabilities are only available in application-layer load balancers, not Layer 4 load balancers.
2
Evaluate the regional and network security constraints.
The virtual machines must not be exposed to the public internet, and they currently use Basic SKU Public IP addresses.
By using a regional Layer 7 load balancer like Azure Application Gateway, the backend pools can be configured using private IP addresses. This allows for the removal of the Basic SKU Public IP addresses from the virtual machines, securing the backend.
3
Select the correct Azure service.
Azure Application Gateway is selected.
It natively provides SSL termination, URL path-routing, and runs within a virtual network to route traffic to private IP addresses.

Anahtar Kavram

Application-layer load balancing using Azure Application Gateway
Soru 317Soru →

A company plans to migrate a legacy payroll application currently running on on-premises physical servers to Azure. The application consists of several web and application servers, along with a Microsoft SQL Server database that utilizes SQL Server Agent jobs and cross-database queries. The network connections between the application servers and external systems are undocumented. The company wants to minimize deployment complexity and administrative overhead for the migration and the final hybrid identity solution. Which migration assessment, database tier, and identity synchronization strategy should you recommend?

Cevabı ve açıklamayı göster

Cevap: Perform agent-based dependency analysis using Azure Migrate, select Azure SQL Managed Instance for the database tier, and implement Microsoft Entra Connect with Password Hash Synchronization (PHS).

Cevap

Perform agent-based dependency analysis using Azure Migrate, select Azure SQL Managed Instance for the database tier, and implement Microsoft Entra Connect with Password Hash Synchronization (PHS).
The correct strategy involves using agent-based dependency analysis because Azure Migrate only supports agent-based dependency mapping for physical servers (unlike VMware or Hyper-V, which support agentless analysis). Azure SQL Managed Instance is required because the database tier relies on SQL Server Agent jobs and cross-database queries, which are not natively supported in Azure SQL Database. Password Hash Synchronization (PHS) with Microsoft Entra Connect is the simplest hybrid identity solution that minimizes administrative overhead and deployment complexity while meeting standard authentication requirements, unlike Active Directory Federation Services (AD FS), which requires significant on-premises infrastructure.

Adım Adım Çözüm

1
Select the dependency assessment approach for physical servers.
Determine that agent-based dependency analysis is required.
Azure Migrate only supports agent-based dependency mapping for physical servers; agentless mapping is restricted to VMware and Hyper-V environments.
2
Determine the appropriate Azure relational database target tier based on features.
Select Azure SQL Managed Instance.
The application database relies on SQL Server Agent and cross-database queries, which are supported in Azure SQL Managed Instance but not natively supported in Azure SQL Database.
3
Identify the hybrid identity integration method that minimizes administrative overhead.
Select Password Hash Synchronization (PHS) with Microsoft Entra Connect.
PHS allows hybrid identity integration with minimal setup and maintenance, whereas Active Directory Federation Services (AD FS) introduces high complexity and is not required for standard integration needs.

Anahtar Kavram

Selecting migration assessment methods, database tiers, and hybrid identity architectures based on server types, application feature requirements, and operational overhead.
Soru 318Soru →

An enterprise is planning to migrate a critical, steady-state production ERP system to Azure. The system consists of two main components: a stateful database tier that runs continuously and requires guaranteed compute availability, and a stateless web server tier that must scale dynamically to handle variable user traffic. Both tiers must be designed to minimize compute costs over a multi-year period, but the solution must guarantee that no virtual machines are subject to unexpected eviction or disruption. Which two virtual machine options or pricing models should you recommend to meet these requirements?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Azure Reserved Virtual Machine Instances for the database tier; Virtual Machine Scale Sets with Flexible orchestration for the web tier

Cevap

Azure Reserved Virtual Machine Instances for the database tier, and Virtual Machine Scale Sets with Flexible orchestration for the web tier
For the database tier, Azure Reserved Virtual Machine Instances are the correct choice because they provide cost optimization for a 24/7 steady-state workload without any risk of eviction. For the web tier, Virtual Machine Scale Sets with Flexible orchestration are the correct choice because they enable dynamic scaling and high availability across multiple availability zones for stateless workloads.

Adım Adım Çözüm

1
Analyze the database tier requirements
The database is a steady-state workload that runs 24/7 and cannot tolerate eviction. Azure Reserved Instances provide cost savings for predictable, continuous compute needs without eviction risk.
Reserved Instances offer up to 72% cost savings over pay-as-you-go for workloads committed to 1 or 3 years.
2
Analyze the web tier requirements
The web tier requires dynamic scaling to handle variable user traffic. Virtual Machine Scale Sets allow for automated autoscaling. Flexible orchestration mode provides high availability and VM control.
Virtual Machine Scale Sets allow stateless web tiers to scale out and in based on demand.
3
Evaluate and eliminate Spot VM options
Spot VMs are eliminated because they can be evicted with a 30-second warning, violating the zero-eviction SLA requirement for both tiers.
Spot VMs are designed for interruptible workloads, not critical production systems.

Anahtar Kavram

Selecting Azure compute and pricing options based on workload predictability, scaling requirements, SLA, and cost constraints.
Tahmini Süre:1m 30s
Soru 319Soru →

An enterprise is designing a hub-and-spoke network topology in Azure to host a multi-tier application. The topology consists of the following components:

* A hub virtual network named `vnet-hub-eus` (10.100.0.0/1610.100.0.0/16) that hosts a central firewall Network Virtual Appliance (NVA) at the IP address 10.100.1.410.100.1.4.
* A spoke virtual network named `vnet-spoke-app` (10.200.0.0/1610.200.0.0/16) that contains two subnets: `snet-web` (10.200.1.0/2410.200.1.0/24) for web servers and `snet-db` (10.200.2.0/2410.200.2.0/24) for database servers.

The virtual networks are peered to allow direct connectivity. You need to design a routing solution that forces all traffic from the web servers in `snet-web` to the database servers in `snet-db` to transit the firewall NVA in the hub for inspection. However, traffic between web servers within the same `snet-web` subnet must remain local and bypass the NVA.

An administrator proposes creating a route table, adding a route for the address prefix 10.200.0.0/1610.200.0.0/16 with a next hop type of Virtual appliance and IP address 10.100.1.410.100.1.4, and associating it with `snet-web`.

What is the primary issue with this proposed design?

Cevabı ve açıklamayı göster

Cevap: It overrides the local system route for the virtual network, causing intra-subnet traffic within the web subnet to be routed to the NVA.

Cevap

The correct answer is that the proposed route overrides the local system route for the virtual network, causing intra-subnet traffic within the web subnet to be routed to the network virtual appliance (NVA).
The correct answer is correct because User-Defined Routes (UDRs) take precedence over default system-defined routes. By configuring a UDR for the entire VNet prefix (10.200.0.0/1610.200.0.0/16), the system route that normally keeps local VNet traffic within the virtual network is overridden. As a result, traffic between hosts on the same subnet is sent to the Network Virtual Appliance (NVA) at 10.100.1.410.100.1.4, disrupting local communication.

Adım Adım Çözüm

1
Analyze Azure route precedence rules.
Confirm that User-Defined Routes (UDRs) always take precedence over default system routes when the destination prefixes match or are more specific.
This establishes that the custom route table will override the default system routes on the subnet.
2
Identify the default system route for local traffic.
The spoke virtual network has a system-defined route for 10.200.0.0/1610.200.0.0/16 with the next hop 'Virtual Network' to keep local traffic within the VNet.
This is the baseline route that permits internal communication between systems in different subnets or the same subnet.
3
Evaluate the impact of the proposed route.
The proposed route targets the broad range 10.200.0.0/1610.200.0.0/16 and points to the NVA (10.100.1.410.100.1.4). This directly overrides the 'Virtual Network' system route.
Since the prefixes match, the UDR takes precedence, forcing all VNet-destined traffic to go to the NVA.
4
Determine how this affects local traffic.
Traffic originating from `snet-web` destined for another IP in the same subnet (e.g., 10.200.1.1010.200.1.10 to 10.200.1.1110.200.1.11) will match the UDR and be forwarded to the hub NVA, breaking intra-subnet connectivity.
This isolates why the broad address space selection in the UDR is problematic.
5
Formulate the correct configuration.
Define a more specific UDR targeting only the database subnet (10.200.2.0/2410.200.2.0/24) with a next hop pointing to the NVA (10.100.1.410.100.1.4).
By using a more specific prefix for the database subnet, local subnet traffic will continue using the default 'Virtual Network' system route, keeping it local.

Anahtar Kavram

Azure route precedence dictates that User-Defined Routes (UDRs) override system-defined routes. Configuring a UDR with an address prefix that encompasses the entire local Virtual Network (VNet) overrides the default local system route, causing all intra-VNet and intra-subnet traffic to be sent to the specified next hop, which breaks local communication.
Soru 320Soru →

A collaborative document editing platform has a global user base and is deployed across virtual machines in the East US and West US regions. You are designing an application delivery and load balancing solution for the platform. The solution must meet the following requirements:
- Route users to the region that offers the lowest latency.
- Implement path-based routing within each region, directing requests for `/edit/*` and `/view/*` to separate backend pools.
- Support SSL/TLS termination at the regional entry point.
- Align with availability zone designs and use Standard SKU resources.

Which two of the following Azure resources should you include in the architectural design to meet these requirements?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Azure Front Door configured with latency-based routing; Azure Application Gateway (Standard v2) in each region

Cevap

Azure Front Door and Azure Application Gateway (Standard v2) in each region
Azure Front Door is selected to provide global latency-based routing for the web application, directing global users to the closest region. Inside each region, Azure Application Gateway (Standard v2) is deployed to handle the Layer 7 requirements, specifically path-based routing (for `/edit/*` and `/view/*`) and SSL/TLS termination, while satisfying the requirement for Standard SKU alignment and availability zones.

Adım Adım Çözüm

1
Select the global load balancing service for HTTP/S traffic.
Azure Front Door is chosen to provide global latency-based routing for web traffic.
Azure Front Door is a global Layer 7 load balancer that directs users to the closest regional endpoint with minimal latency.
2
Select the regional load balancing service that supports path-based routing and SSL termination.
Azure Application Gateway (Standard v2) is selected for each region.
Azure Application Gateway provides Layer 7 capabilities, enabling routing based on URL paths (`/edit/*` and `/view/*`) and performing SSL/TLS termination at the regional level.
3
Verify SKU compatibility with availability zones and other resources.
Avoid Basic SKU load balancers and ensure Standard SKU alignment.
Mixing Basic and Standard SKUs in Azure network resources causes deployment validation failures, and Standard SKU is required for zone redundancy.

Anahtar Kavram

Combining global latency-based routing with regional path-based application load balancing using Standard SKU resources.
Tahmini Süre:1m 30s
ÖncekiSayfa 16 / 18Sonraki