Microsoft Azure Solutions Architect Expert AZ-305 Practice Question
Your company hosts an e-commerce application on virtual machines deployed in two Azure regions in an active-active pattern. You must publish the site through one globally reachable hostname that provides TLS/SSL termination close to users, URL path-based routing to different microservice endpoints, automatic failover to the secondary region if the primary becomes unavailable, and centralized protection against common web exploits such as the OWASP Top 10. Which Azure networking service should you include in the solution design to satisfy all of these requirements?
Deploy Azure Traffic Manager in priority mode and point it to regional Azure Load Balancer public IP addresses.
Expose the application through Azure Firewall instances advertising public IP prefixes over ExpressRoute.
Place an Azure Application Gateway v2 in each region and use a cross-region Azure Load Balancer to distribute traffic.
Deploy Azure Front Door and apply a Web Application Firewall (WAF) policy to it.
Azure Front Door delivers a single anycast public endpoint announced from Microsoft's global edge, giving users one globally distributed hostname. Front Door performs layer-7 load balancing with built-in TLS/SSL offload, URL path-based routing, and health-probe-driven failover between multiple back-end regions. It also integrates directly with Azure Web Application Firewall policies, providing centralized protection against OWASP Top 10 threats.
Azure Traffic Manager offers only DNS-based redirection, not a single anycast IP, and cannot perform SSL offload or provide a WAF. Standard or cross-region Azure Load Balancer works at layer 4 and lacks path-based routing and WAF features. Azure Firewall is a stateful network firewall, not a global web front-end, and does not supply anycast endpoints or application-layer load-balancing capabilities. Therefore, Azure Front Door with WAF is the only option that satisfies every stated requirement.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Azure Front Door?
Open an interactive chat with Bash
How does Azure Web Application Firewall (WAF) protect against OWASP Top 10 threats?
Open an interactive chat with Bash
What is the difference between Azure Front Door and Azure Traffic Manager?
Open an interactive chat with Bash
Microsoft Azure Solutions Architect Expert AZ-305
Design infrastructure solutions
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .