A retail site must serve users worldwide from edge locations, terminate TLS close to the user, block common web attacks and malicious bots, and fail over between two backend regions within seconds. Which service should you deploy?
Show answer and explanation
Answer: D
Azure Front Door is a global Layer 7 entry point. Requests are terminated at edge locations on Microsoft's network, which handles TLS close to users, and health-based origin failover moves traffic to a healthy backend in seconds. A WAF policy blocks common web attacks, and the Premium tier adds managed bot protection. Traffic Manager works at DNS, so failover depends on DNS caching and it cannot inspect or filter requests. Application Gateway is regional, so it has no edge presence. Standard Load Balancer is a regional Layer 4 service with no web application firewall.
Why the other options are wrong
- A. Traffic Manager only answers DNS queries. It cannot terminate TLS, inspect HTTP requests or block bots, and its failover waits on DNS caching.
- B. Application Gateway is a regional service without edge locations, so it cannot serve users from points of presence around the world.
- C. Standard Load Balancer operates at Layer 4 in one region and offers no web application firewall or bot management.