Get Your CertAZ-104PlayCompete
‹ All AZ-104 questions

AZ-104 Practice Question 98: Front Door Versus Traffic Manager

Microsoft Azure Administrator Associate (AZ-104) · Test 10 · question 8 of 10

Virtual Networkinghard

A web application is deployed in two regions. It needs TLS termination at the edge, a web application firewall, and failover that is not delayed by DNS caching on clients.

Which service should the administrator use in front of the regions?

Select one answer
Show answer and explanation

Answer:

  • D. Azure Front Door

Azure Front Door is a global layer 7 service that terminates TLS at the edge, supports a web application firewall, and routes traffic by health probes at the HTTP level, so failover does not depend on clients refreshing DNS records.

Option A is DNS-based, so it does not terminate TLS or inspect HTTP, and failover waits on the DNS TTL.

Option B is a regional layer 4 service and does not balance between regions.

Option C is a regional layer 7 gateway, which does not distribute traffic globally across two regions.

Reference: Load-balancing options: Azure Front Door, Traffic Manager, Application Gateway and Load Balancer

Practice Test 10 ›

Study guides for AZ-104

Azure Administrator (AZ-104): jobs, salary and the examAzure administrator role, jobs and pay data, and the AZ-104 exam: five domains, 100 minutes, US$165 / ₹4,865, AZ-900 first or not, and what next.
AZ-400 exam guide: DevOps Engineer Expert in 2026AZ-400 exam guide: the DevOps Engineer Expert prerequisites now that AZ-204 is retired, the five skill areas, price, renewal and a study plan.
Azure certification path 2026: AZ-900, AZ-104, AZ-305The Azure certification path for 2026 - AZ-900, AZ-104 and AZ-305 in order, what each covers, the AZ-305 prerequisite, renewal and what to skip.
Azure RBAC vs Azure Policy vs Entra roles vs resource locksHow Azure RBAC, Azure Policy, Microsoft Entra roles and resource locks differ, how scope inheritance works, and when deny beats audit.
Azure Storage redundancy - LRS, ZRS, GRS, GZRS and failoverHow LRS, ZRS, GRS, RA-GRS, GZRS and RA-GZRS differ, what failover does to your account, and how access tiers interact with redundancy.