AZ-700 Question 203
Select 2You manage an Azure Application Gateway routing traffic to multiple backend web applications. Each application must receive traffic over a secure connection from the gateway, and user sessions must stay on the same backend instance for proper session state management. Which two configuration changes should you make under the Application Gateway� HTTP settings to meet these requirements?
- A
Enable cookie-based affinity
- B
Set the backend protocol to HTTPS
- C
Disable server name indication (SNI)
- D
Disable cookie-based affinity
Show answer and explanation
Correct answers: A, B
Explanation
To meet the requirements of both secure connections and session persistence, the key HTTP settings are enabling cookie-based affinity and specifying HTTPS for backend protocol on the Azure Application Gateway. This aligns with Microsoft� best practices for handling session state in multi-instance environments and ensuring encrypted traffic to backends. For further details, refer to Microsoft Docs on configuring HTTP settings for Azure Application Gateway: https://learn.microsoft.com/azure/application-gateway/configuration-overview#http-settings.
- A. Correct.
Enabling cookie-based affinity ensures that each returning user is consistently routed to the same backend instance, maintaining session state correctly.
- B. Correct.
Setting the backend protocol to HTTPS guarantees secure communication between the Application Gateway and the web applications, fulfilling the requirement for encrypted traffic.
- C. Incorrect.
Disabling server name indication (SNI) is normally not required in this scenario. SNI helps host multiple SSL certificates on the same IP/port. Turning it off wouldn�t address session affinity or encrypted traffic requirements.
- D. Incorrect.
Disabling cookie-based affinity would break session-specific routing; in fact, you need to enable it, not disable it.