An application needs load balancing WITH URL-path routing (/api → one pool, /images → another), TLS termination, and WAF. Which service fits?
A.Azure Load Balancer
LB is L4 — can't route on URL paths or terminate TLS.
B.Azure Application Gateway
App Gateway = regional L7 + WAF. Correct.
C.Azure Front Door
Front Door is global L7 — overkill for single-region, and 'regional L7 + WAF' is App Gateway's identity.
D.Azure Traffic Manager
Traffic Manager does DNS-level traffic steering — no HTTP routing.
Why this answer
Application Gateway = regional L7 (HTTP) load balancer with path-based routing, TLS offload, cookie affinity, and integrated WAF. Load Balancer is L4 (TCP/UDP, no HTTP awareness); Front Door is the GLOBAL L7 equivalent; Traffic Manager is DNS-based routing.
Correct answer: B · Last reviewed 2026-02-14
Official AWS references
Practice this interactively
Answer without seeing the solution first in the Virtual Networking practice session.
Practice Virtual Networking