Microsoft Certified: Azure Administrator AssociateImplement and manage virtual networkingMedium
A company plans to deploy a highly available web application across multiple Azure regions. The application needs to ensure optimal routing to the closest available endpoint based on user location and maintain session affinity for specific users during their session. Which Azure networking service should you implement?
- AAzure Application Gateway
- BAzure Load Balancer
- CAzure Traffic Manager
- DAzure Front Door
Show answer & explanationAnswer & explanation
Correct answer: D. Azure Front Door
Azure Front Door is a global, scalable entry-point that uses the Microsoft global edge network to create fast, secure, and widely scalable web applications. It provides optimal routing (latency-based) to the closest available backend and supports session affinity (sticky sessions) at the global level.
Why the other options are wrong
- A. Application Gateway operates within a single region and does not provide global routing based on user location.
- B. Azure Load Balancer operates at Layer 4 within a single region and does not offer global traffic management or user-location-based routing.
- C. Azure Traffic Manager is a DNS-based traffic load balancer that provides global routing but does not inherently offer application-layer features like session affinity.
Azure Front Door
A global, scalable, and secure entry point for fast delivery of web applications and APIs, offering Layer 7 capabilities, global load balancing, and WAF.
- Global Layer 7 load balancing
- Optimal routing based on user location (latency)
- Supports session affinity
- Integrated WAF and CDN capabilities
Memory trick: Front Door is global for web apps, Traffic Manager for DNS, Load Balancer for regional TCP/UDP.