AZ-700 Question 214
Single answerYou are designing an e-commerce platform that must serve both dynamic and static content to customers across multiple continents. The solution needs to provide high availability, low-latency global load balancing, integrated web application firewall (WAF) protection, and SSL offloading. It must also support advanced routing rules based on URL paths. Which solution best meets these requirements?
- A
Deploy Azure Front Door with a WAF policy and multiple backend pools distributed across global regions.
- B
Deploy Azure Load Balancer in each region and use Azure Traffic Manager for DNS-based global routing.
- C
Use an Azure Application Gateway in each region for SSL offloading and path-based routing with manual global failover.
- D
Use Azure CDN for all site content and place a single web application in one region to handle dynamic traffic.
Show answer and explanation
Correct answer: A
Explanation
Azure Front Door is the recommended service when you need global distribution of both static and dynamic content, as well as application-layer routing, SSL offloading, and integrated WAF. It addresses key requirements such as low latency, high availability, security, and path-based routing. For more details, refer to the official documentation: https://learn.microsoft.com/azure/frontdoor.
- A. Correct.
Option 1 is correct. Azure Front Door provides a globally distributed entry point for both static and dynamic content, offers Layer 7 routing, can offload SSL, and integrates with a WAF. It is specifically designed to handle global load balancing, advanced path-based routing, and acceleration for dynamic and static content.
- B. Incorrect.
Option 2 is incorrect because Azure Traffic Manager only offers DNS-based routing, which lacks the advanced Layer 7 capabilities needed for path-based routing and integrated WAF. Azure Load Balancer is also a Layer 4 service that does not directly address global distribution or application-level routing.
- C. Incorrect.
Option 3 is incorrect because Application Gateway is region-specific. While it does support WAF and path-based routing, you would still need a global solution to distribute traffic across regions. Manually failing over between gateways does not meet the requirement for high availability and low latency at a global scale.
- D. Incorrect.
Option 4 is incorrect because Azure CDN excels at delivering static content but does not provide the advanced routing or integrated WAF capabilities required for dynamic content. Serving dynamic requests from a single region would not meet global performance and redundancy requirements.