Exam AZ-300 topic 2 question 40 discussion

Actual exam question from Microsoft's AZ-300

Question #: 40
Topic #: 2

You are designing an Azure solution.
The solution must meet the following requirements:
Distribute traffic to different pools of dedicated virtual machines (VMs) based on rules
Provide SSL offloading capabilities
You need to recommend a solution to distribute network traffic.
Which technology should you recommend?

A. server-level firewall rules
B. Azure Application Gateway
C. Azure Traffic Manager
D. Azure Load Balancer

Show Suggested Answer

Suggested Answer: B 🗳️
If you require "SSL offloading", application layer treatment, or wish to delegate certificate management to Azure, you should use Azure's layer 7 load balancer
Application Gateway instead of the Load Balanacer.
Incorrect Answers:
D: Because Load Balancer is agnostic to the TCP payload and TLS offload ("SSL") is not provided.
References:
https://docs.microsoft.com/en-us/azure/application-gateway/overview

by gboyega at July 14, 2020, 1:21 a.m.

Comments

Submit Cancel

gboyega

Highly Voted 4 years, 10 months ago

Given answer is correct

upvoted 13 times

tartar

4 years, 8 months ago

B is ok

upvoted 2 times

...

tundervirld

Most Recent 4 years, 9 months ago

Both will work to balance traffic, the difference is that Azure Load Balancer works with traffic at Layer 4, while Application Gateway works with Layer 7 traffic, and specifically with HTTP (including HTTPS and WebSockets). https://medium.com/awesome-azure/azure-difference-between-azure-load-balancer-and-application-gateway-9a6019c23840

upvoted 2 times

...