Microsoft Azure Fundamentals (AZ-900)Describe Azure identity, security, and networkingMedium

A global organization is deploying an application across multiple Azure regions to ensure low latency for users worldwide. They need a service that can route user requests to the closest available endpoint based on geographic location. Which Azure service should they use?

  1. AAzure Application Gateway
  2. BAzure VPN Gateway
  3. CAzure Load Balancer
  4. DAzure Front Door
Show answer & explanation

Correct answer: D. Azure Front Door

Azure Front Door is a global, scalable entry point that uses Microsoft's global edge network to create fast, secure, and widely scalable web applications. It provides dynamic site acceleration and global HTTP(S) load balancing with geographic routing capabilities.

Why the other options are wrong

  • A. Azure Application Gateway is a Layer 7 (application layer) load balancer within a single region, often including WAF.
  • B. Azure VPN Gateway is used for connecting on-premises networks to Azure virtual networks, not for global traffic routing.
  • C. Azure Load Balancer operates at Layer 4 (transport layer) within a single region.

Azure Front Door

A global, scalable entry point that uses the Microsoft global edge network to create fast, secure, and widely scalable web applications.

  • Provides global HTTP/HTTPS load balancing.
  • Offers dynamic site acceleration and geographic routing.
  • Includes Web Application Firewall (WAF) capabilities at the edge.

Memory trick: Front Door opens globally, directs users to the closest entry.

More Describe Azure identity, security, and networking questions