Exam AZ-800 topic 4 question 26 discussion

Answer is c Why Azure Relay is the Best Choice Azure Relay is ideal because: It enables secure exposure of on-premises services to the internet without opening multiple inbound ports2 It natively supports WebSocket connections for bi-directional communication2 It requires minimal firewall configuration since it uses outbound connections to establish connectivity

I choose C

The Azure Relay service

The Azure Relay service enables you to securely expose services that run in your corporate network to the public cloud. You can do so without opening a port on your firewall, or making intrusive changes to your corporate network infrastructure.... https://learn.microsoft.com/en-us/azure/azure-relay/relay-what-is-it So C looks correct.

C. Azure Relay: Azure Relay facilitates securely exposing services that run in your corporate network to the public cloud without requiring you to open a firewall connection, or require intrusive changes to a corporate network infrastructure. It creates a secure communication channel to the service, minimizing the need for open inbound ports.

Azure Application Gateway requires connection to the target server. On-premises network NOT connected to Azure by VPN. To use Application Gateway we need to open ports on firewall but " The solution must minimize the number of inbound ports open on Firewall1" Azure Relay is the best option here

I interrogated chatGPT and it gave me this answer. No, Azure Relay (option C) is not the ideal choice for this scenario. Azure Relay is designed for different use cases, such as securely connecting on-premises resources to Azure services or providing hybrid connectivity. For exposing an internal application to the internet via WebSockets and minimizing the number of open ports on your on-premises firewall, Azure Application Gateway (option B) is the more appropriate choice. Azure Application Gateway is designed for load balancing and securely publishing web applications, and it can handle WebSocket traffic effectively while maintaining security and control over inbound traffic.