Get Your CertAZ-900PlayCompete
‹ All AZ-900 questions

AZ-900 Practice Question 75: Load Balancer vs Application Gateway

Microsoft Azure Fundamentals (AZ-900) · Test 8 · question 5 of 10

Azure Architecturemedium

A web app team needs incoming requests split by URL path (/images to one backend pool and /api to another), and they want TLS terminated at the load-balancing layer itself rather than on every backend server. Which Azure service meets both requirements?

Select one answer
Show answer and explanation

Answer:

  • A. Azure Application Gateway

Application Gateway is a web traffic load balancer that operates at the application layer (OSI layer 7), making routing decisions based on HTTP attributes like the URL path, and it supports SSL/TLS termination at the gateway; both requirements in the stem map directly onto its two headline features.

Option B, Azure Load Balancer, operates at layer 4 on IP address and port alone; it never inspects the HTTP request, so it cannot route by URL path or terminate TLS. Option C, Traffic Manager, is a DNS-based service that directs clients to an entire endpoint before any HTTP request is made, so it has no visibility into a URL path and does no TLS work at all. Option D, Front Door, is Microsoft's global edge service for routing and failing over between entire regional deployments of an app, not the regional application-layer balancer this single-region scenario calls for.

Reference: What is Azure Application Gateway

Practice Test 8 ›

Study guides for AZ-900

Azure Administrator (AZ-104): jobs, salary and the examAzure administrator role, jobs and pay data, and the AZ-104 exam: five domains, 100 minutes, US$165 / ₹4,865, AZ-900 first or not, and what next.
Free cloud certifications in 2026: which are really freeWhich free cloud certifications are really free in 2026: Oracle's free OCI exams, and the voucher routes for AWS, Microsoft and Google, with prices.
AI-901 exam guide: Azure AI Fundamentals after AI-900AI-901 replaced AI-900: learn what changed, how much Python and Microsoft Foundry you need, exam costs in India, and how to prepare.
Microsoft Fabric certification: DP-700 vs DP-600Microsoft Fabric certification means two exams, DP-600 and DP-700. Their roles, skills, format, cost in India, and which one to take first.
Which cloud certification is best? AWS vs Azure vs GoogleWhich cloud certification is best for a beginner? AWS Cloud Practitioner, AZ-900 and Google Cloud Digital Leader compared: cost, format and which first.
Azure certification path 2026: AZ-900, AZ-104, AZ-305The Azure certification path for 2026 - AZ-900, AZ-104 and AZ-305 in order, what each covers, the AZ-305 prerequisite, renewal and what to skip.
Azure RBAC vs Azure Policy vs Entra roles vs resource locksHow Azure RBAC, Azure Policy, Microsoft Entra roles and resource locks differ, how scope inheritance works, and when deny beats audit.
Azure Storage redundancy - LRS, ZRS, GRS, GZRS and failoverHow LRS, ZRS, GRS, RA-GRS, GZRS and RA-GZRS differ, what failover does to your account, and how access tiers interact with redundancy.