AZ-700 Question 192
Single answerContoso is planning to build a new e-commerce website to handle user traffic for multiple product lines under a single domain. They want to route requests based on URL path to separate backend pools, terminate SSL connections at the gateway to reduce resource usage on servers, and protect the application from common web vulnerabilities with a built-in firewall. Which Azure service is most appropriate for these requirements?
- A
Azure Load Balancer
- B
Azure Traffic Manager
- C
Azure Application Gateway
- D
Azure Virtual Network Gateway
Show answer and explanation
Correct answer: C
Explanation
Azure Application Gateway provides advanced HTTP load balancing at Layer 7, supporting path-based routing, SSL offloading, and integrated WAF, making it the best fit for this scenario. More information can be found in Microsoft documentation: https://learn.microsoft.com/azure/application-gateway/overview.
- A. Incorrect.
Azure Load Balancer is a Layer 4 load balancer that operates at the transport layer. It doesn�t provide path-based routing or a built-in Web Application Firewall, so it cannot meet the scenario� advanced Layer 7 requirements.
- B. Incorrect.
Azure Traffic Manager is a DNS-based global load balancing service. While useful for distributing traffic across multiple regions or endpoints, it cannot perform SSL offloading or path-based routing. It also lacks integrated WAF capabilities.
- C. Correct.
Azure Application Gateway is a Layer 7 load balancer with advanced routing features, including path-based routing, SSL termination (offloading), and a built-in Web Application Firewall. It is designed specifically to meet scenarios like Contoso�, where both security and sophisticated application-layer routing are required.
- D. Incorrect.
Azure Virtual Network Gateway is primarily used to establish VPN or ExpressRoute connections between on-premises environments and Azure VNets. It does not provide Layer 7 load balancing or WAF functionality.