A ticketing platform serves fans worldwide. It needs a web application firewall and acceleration at the global edge, then path- and host-based routing inside each region toward that region's web tier. Which layered design fits?
Show answer and explanation
Answer: B
Front Door provides the global edge with acceleration and WAF protection, then sends requests to the nearest healthy regional origin. Each regional Application Gateway performs per-region layer 7 routing to its own backend pools. This layering keeps global and regional responsibilities separate and close to the workloads.
Why the other options are wrong
- A. Traffic Manager returns DNS answers and does not inspect or accelerate HTTP requests. Pointing it at VM NICs also skips any layer 7 routing or web application firewall inside each region.
- C. An internal Load Balancer is private and cannot serve internet clients directly, and Traffic Manager does not sit in the request path to be fronted. The order is reversed, so this design fails.
- D. Route Server exchanges BGP routes with network virtual appliances and is not a web entry point. It provides no edge WAF or layer 7 routing for HTTP traffic.