Exam AZ-500 topic 6 question 5 discussion

I have been working with AppGW, AFD and CDN for about 4 years now... for this specific requirement of TLS unburdening, I will definitely go with AppGW. AFD is more used for it's global and priority balancing qualities, but AppGW here would be the chosen option and what I would recommend to a customer to go with for good TLS performance. https://learn.microsoft.com/en-us/azure/application-gateway/features#url-based-routing URL-based routing URL Path Based Routing allows you to route traffic to backend server pools based on URL Paths of the request. One of the scenarios is to route requests for different content types to different pool. For example, requests for http://contoso.com/video/* are routed to VideoServerPool, and http://contoso.com/images/* are routed to ImageServerPool. DefaultServerPool is selected if none of the path patterns match.

The correct answer is: D. Azure Application Gateway You need a solution that: - Minimizes the TLS (SSL) performance impact on backend pools - Routes requests based on URL path (/images/* to Pool1, /videos/* to Pool2, etc.)

The answer is D.

Request is very specific and matches exactly what Azure Application Gateway does. FrontDoor does much more which is not asked here.

From the looks of the requirement, I have a feeling both B and D can be ok solutions. There is no mention of global distribution, so I would lean into D (the gateway) more.

https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-ssl-policy-overview

Minimize performance impact of TLS inspection is the keyword here. Recommended solution is App gateway. https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-ssl-policy-overview

Answer is D. URL Path Based Routing allows you to route traffic to backend server pools based on URL Paths of the request. One of the scenarios is to route requests for different content types to different backend server pools. In the following example, Application Gateway is serving traffic for contoso.com from three backend server pools for example: VideoServerPool, ImageServerPool, and DefaultServerPool. Reference: https://learn.microsoft.com/en-us/azure/application-gateway/url-route-overview

D. Azure Application Gateway

B - AFD and App Gateway can both routes requests but AFD as a CDN can minimize the impact on the performances

B. Azure Front Door. Apart from the requirements, CDN will improve the performance of the app.

B. Azure Front Door

Azure Front Door is a more specialized service for content delivery and global routing, making it a better fit for optimizing the performance of App1.

https://learn.microsoft.com/en-us/azure/application-gateway/features https://learn.microsoft.com/en-us/azure/application-gateway/features#url-based-routing https://learn.microsoft.com/en-us/azure/application-gateway/features#secure-sockets-layer-ssltls-termination While Azure Front Door may solve this, the correct answer is D Application Gateway. The requirements are very specific, but AFD is used for global and the question doesn´t mention that.

Correct answer B. Azure Front Door

Azure Front Door is a content delivery network (CDN) and global load balancer service. It offers several features that align with the requirements of the scenario: - Minimize performance impact of TLS connections - Route user requests based on URL path Option A, Azure Bastion, is used for secure remote access to VMs. Option C, Azure Traffic Manager, is a DNS-based traffic routing service that can distribute user requests across multiple endpoints based on various routing methods but doesn’t provide SSL termination at the edge. Option D, Azure Application Gateway, is a web traffic load balancer that provides layer 7 load balancing and other application delivery features. Not a CDN.

https://learn.microsoft.com/en-us/azure/application-gateway/create-url-route-portal