Exam AZ-301 topic 17 question 59 discussion

Actual exam question from Microsoft's AZ-301

Question #: 59
Topic #: 17

You plan to deploy 10 applications to Azure. The applications will be deployed to two Azure Kubernetes Service (AKS) clusters. Each cluster will be deployed to a separate Azure region.
The application deployment must meet the following requirements:
✑ Ensure that the applications remain available if a single AKS cluster fails.
✑ Ensure that the connection traffic over the internet is encrypted by using SSL without having to configure SSL on each container instance.
Which Azure service should you include in the recommendation?

A. Azure Front Door
B. Azure Traffic Manager
C. Azure Load Balancer
D. AKS ingress controller

Show Suggested Answer

Suggested Answer: A 🗳️
Azure Front Door enables you to define, manage, and monitor the global routing for your web traffic by optimizing for best performance and instant global failover for high availability. With Front Door, you can transform your global (multi-region) consumer and enterprise applications into robust, high-performance personalized modern applications, APIs, and content that reaches a global audience with Azure.
Front Door works at Layer 7 or HTTP/HTTPS layer and uses anycast protocol with split TCP and Microsoft's global network for improving global connectivity.
Incorrect Answers:
B: Azure Traffic Manager uses DNS (layer 3) to shape traffic. SSL works at Layer 6.
Azure Traffic Manager can direct customers to their closest AKS cluster and application instance. For the best performance and redundancy, direct all application traffic through Traffic Manager before it goes to your AKS cluster.
Reference:
https://docs.microsoft.com/en-us/azure/frontdoor/front-door-overview

by Test_Taker_1 at Aug. 21, 2020, 3:15 a.m.

Comments

Submit Cancel

Test_Taker_1

Highly Voted 4 years, 9 months ago

The question is really reduced to what service best handles a Region failure and has SSL offloading. Front Door is correct.

upvoted 5 times

...

BokehWarrior

Most Recent 4 years, 9 months ago

Azure Front Door provides TLS protocol termination (SSL offload), and Azure Traffic Manager does not

upvoted 1 times

...