AZ-700 Question 191
Single answerA global e-commerce company is migrating its microservices-based platform to Azure. They need an application-layer load balancer capable of path-based routing, inserting custom security headers, providing Web Application Firewall functionality, and performing SSL termination with re-encryption to the back-end services. Which Azure service best suits these requirements?
- A
Azure Application Gateway with WAF
- B
Azure Load Balancer
- C
Azure Traffic Manager
- D
Azure VPN Gateway
Show answer and explanation
Correct answer: A
Explanation
Azure Application Gateway is designed for advanced Layer 7 traffic management scenarios, offering SSL offloading, path-based routing, and WAF. For more details, refer to Microsoft's official documentation on Azure Application Gateway best practices and architectural guidance.
- A. Correct.
Option 1: Correct. Azure Application Gateway with WAF provides Layer 7 load balancing, path-based routing, custom header capabilities, SSL offloading/re-encryption, and integrated WAF policies�exactly matching the scenario's requirements.
- B. Incorrect.
Option 2: Incorrect. Azure Load Balancer operates at Layer 4 (TCP/UDP). It doesn't support path-based routing, custom headers, or a Web Application Firewall.
- C. Incorrect.
Option 3: Incorrect. Azure Traffic Manager is a DNS-based global routing solution that distributes traffic to different endpoints but does not provide SSL offloading, path-based routing, or WAF functionality.
- D. Incorrect.
Option 4: Incorrect. Azure VPN Gateway is used for secure, site-to-site VPN connections rather than for application-layer load balancing or WAF features.