AZ-305 Question 241
Single answerYou are designing a global e-commerce platform hosted in multiple Azure regions. The platform must handle user session affinity, perform SSL offloading to reduce the load on the web servers, and automatically fail over traffic to another region if the primary region becomes unavailable. Which solution should you implement to meet all these requirements?
- A
Use an Azure Load Balancer in each region and manually update DNS records in the event of a region failure.
- B
Use Azure Application Gateway for each region, placing them behind a Traffic Manager profile configured for failover.
- C
Use Azure Front Door to route traffic globally with session affinity and SSL offloading enabled.
- D
Use Azure Traffic Manager for global routing in performance mode, relying on on-premises appliances for SSL offloading.
Show answer and explanation
Correct answer: C
Explanation
Azure Front Door is specifically designed to offer global, high-performance content delivery and load balancing with features like session affinity, SSL offloading, and automatic failover. It simplifies the architecture by combining routing and health probes in a single service. Refer to the official Azure Front Door documentation (https://docs.microsoft.com/azure/frontdoor/) for guidance on setting it up for global e-commerce scenarios.
- A. Incorrect.
Incorrect. Azure Load Balancer operates at Layer 4 and does not provide built-in global routing capabilities or SSL offloading. Also, manual DNS record updates can incur significant downtime.
- B. Incorrect.
Incorrect. While combining Azure Application Gateway with Traffic Manager can provide global failover, you would still need to configure multiple components. Traffic Manager does not handle SSL offloading, and you'd have to configure separate Application Gateways per region for session affinity. It's more complex and less straightforward than a single Front Door solution.
- C. Correct.
Correct. Azure Front Door provides global routing, session affinity (via cookies), and SSL offloading. It can automatically fail over traffic to a secondary region if the primary is unavailable, meeting all the listed requirements.
- D. Incorrect.
Incorrect. Azure Traffic Manager can provide global routing but does not offer SSL offloading. Relying on on-premises appliances is not recommended for a fully Azure-based solution requiring low-latency global reach.