AZ-303 Exam - Question 110

Question

HOTSPOT -You have an Azure subscription. You plan to deploy an app that has a web front end and an application tier. You need to recommend a load balancing solution that meets the following requirements:✑ Internet to web tier:- Provides URL-based routing- Supports connection draining- Prevents SQL injection attacks✑ Web tier to application tier:- Provides port forwarding- Supports HTTPS health probes- Supports an availability set as a backend poolWhich load balancing solution should you recommend for each tier? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:.

Examice · Accepted Answer

Box 1: An Azure Application Gateway that has a web application firewall (WAF)

Azure Application Gateway offers a web application firewall (WAF) that provides centralized protection of your web applications from common exploits and vulnerabilities. Web applications are increasingly targeted by malicious attacks that exploit commonly known vulnerabilities. SQL injection and cross-site scripting are among the most common attacks.

Application Gateway operates as an application delivery controller (ADC). It offers Secure Sockets Layer (SSL) termination, cookie-based session affinity, round- robin load distribution, content-based routing, ability to host multiple websites, and security enhancements.

Box 2: An internal Azure Standard Load Balancer

The internet to web tier is the public interface, while the web tier to application tier should be internal.

Note: When using load-balancing rules with Azure Load Balancer, you need to specify a health probes to allow Load Balancer to detect the backend endpoint status.

Health probes support the TCP, HTTP, HTTPS protocols.

Reference:

https://docs.microsoft.com/en-us/azure/application-gateway/waf-overview https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-custom-probe-overview

xaccan · Answer

correct

chen17 · Answer

On exam 5/21/2021

azurellc · Answer

On exam 5/15/2021

AravindITGuy · Answer

Took exam today passed this morning was on there 6/21/2021

MKA1976 · Answer

Port forwarding is not supported by internal LB.

lazyme · Answer

Port forwarding is supported by ILB as well.
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview

awsazurelearner · Answer

Port Forwarding is supporting by an Internal LB.  I gave it a try in a sandboxed environment and I was able to create in Inbound NAT rule to forward traffic from one port to another.  The given answer for Internal Load Balancer is correct and should be the preferred method for an internal application tier load balancing.

tita_tovenaar · Answer

answer is correct. Careful! HTTPS probes are only for standard LB. Not available for Basic.

Dpejic · Answer

On exam today 22/11/21. r. Score 839

AAPaul · Answer

I had this question in the exam that i took on July 14th 2021

syu31svc · Answer

Answer is correct

The web tier to application tier should be internal and Standard SKU supports probes on HTTPS.

https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-custom-probe-overview

https://docs.microsoft.com/en-us/azure/application-gateway/features

nd78 · Answer

on Exam today 21st Jan, 2022

yassali · Answer

Seems to be correct

leo_az300 · Answer

Why public standard LB is not the answer?

The only thing s standard LB can not do is HA ports but internal LB can, refer to this https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-ha-ports-overview

if Internal LB is the correct answer I assume the option for public is incorrect. it should be Public Basic LB. In this case, it doesn't support HTTPS health probe.

quantumray · Answer

Question appeared On AZ-303 exam on 08/12/2021 - 49 questions, 4Q - Fabrikan case study

AZ-303 Exam - Question 110

Discussion