Microsoft Certified: Azure Administrator AssociateImplement and manage virtual networkingMedium
A company is designing a highly available and scalable web application in Azure. The application will be hosted on multiple Azure Virtual Machines (VMs) and needs to distribute HTTP and HTTPS traffic based on URL path. Additionally, the application requires Web Application Firewall (WAF) capabilities to protect against common web vulnerabilities. Which Azure networking service should be used to meet these requirements?
- AAzure Traffic Manager
- BAzure Front Door
- CAzure Application Gateway
- DAzure Load Balancer
Show answer & explanationAnswer & explanation
Correct answer: C. Azure Application Gateway
Azure Application Gateway is a Layer 7 (HTTP/HTTPS) load balancer that supports URL-path-based routing and includes an optional integrated Web Application Firewall (WAF). This perfectly aligns with the requirements for distributing HTTP/HTTPS traffic by URL path and providing WAF protection.
Why the other options are wrong
- A. Azure Traffic Manager is a DNS-based global load balancer that operates at the DNS level (Layer 7 conceptually but not for traffic inspection) and does not offer URL-path-based routing or WAF capabilities.
- B. Azure Front Door is a global Layer 7 load balancer with WAF, but it's designed for geo-distributed applications and global traffic management. For applications within a single region requiring URL-path-based routing and WAF, Application Gateway is the more direct and appropriate solution.
- D. Azure Load Balancer operates at Layer 4 (TCP/UDP) and does not support URL-path-based routing or integrated WAF capabilities.
Azure Application Gateway
A web traffic load balancer that enables you to manage traffic to your web applications, offering Layer 7 features like URL-path-based routing, SSL offloading, and Web Application Firewall (WAF).
- Operates at Layer 7 (HTTP/HTTPS).
- Supports URL-path-based routing, host-based routing, and SSL termination.
- Can integrate a Web Application Firewall (WAF) for protection against common web attacks.
Memory trick: Application Gateway: Your smart web traffic cop with a WAF shield.