Microsoft Azure Security Engineer Associate AZ-500 Practice Question
Contoso runs identical web applications on Azure App Service in East US and West Europe. You must expose a single public endpoint that: terminates TLS with a custom certificate; evaluates a Web Application Firewall policy as close to users as possible; supports cookie-based session affinity; and automatically directs clients to the nearest healthy backend. Which Azure service meets all requirements?
An Azure Load Balancer Standard paired with Azure DDoS Protection Standard
Azure Front Door Standard or Premium with an attached WAF policy
Azure Traffic Manager in Performance mode front-ending the two App Service instances
Separate Azure Application Gateway v2 instances in each region configured for multi-site hosting
Azure Front Door provides a global point of presence that performs layer-7 load balancing and routes each request to the closest available backend. It offloads TLS for custom domains, supports built-in Web Application Firewall policies enforced at the edge, and can maintain user affinity by injecting a session cookie.
A regional Azure Application Gateway still requires a separate gateway per region and does not offer global anycast entry points.
Azure Traffic Manager is DNS-based; it cannot terminate TLS, apply a WAF policy, or maintain session affinity.
Azure Load Balancer operates at layer 4 and cannot perform TLS offload, WAF inspection, or cookie-based affinity.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Azure Front Door and how does it work for global load balancing?
Open an interactive chat with Bash
What is the role of Web Application Firewall (WAF) in Azure Front Door?
Open an interactive chat with Bash
How does Azure Front Door maintain session affinity using cookies?
Open an interactive chat with Bash
Microsoft Azure Security Engineer Associate AZ-500
Secure networking
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .