Microsoft Azure Administrator Associate AZ-104 Practice Question

To reduce the encryption processing load on the backend servers while maintaining end-to-end encryption, you should configure the Application Gateway to terminate incoming encrypted connections, process the requests, and then establish new encrypted connections to the backend servers. This setup offloads the initial encryption handshake and processing from the backend servers to the Application Gateway, improving their performance, while still keeping the traffic encrypted from the clients to the servers. Simply passing the encrypted traffic through (passthrough) would not reduce the load on the backend servers. Terminating encryption at the Application Gateway and forwarding traffic unencrypted would violate the compliance requirement of end-to-end encryption. Accepting unencrypted traffic from clients would also breach compliance.