exam questions

Exam AZ-305 All Questions

View all questions & answers for the AZ-305 exam

Exam AZ-305 topic 3 question 9 discussion

Actual exam question from Microsoft's AZ-305
Question #: 9
Topic #: 3
[All AZ-305 Questions]

You plan to deploy 10 applications to Azure. The applications will be deployed to two Azure Kubernetes Service (AKS) clusters. Each cluster will be deployed to a separate Azure region.
The application deployment must meet the following requirements:
✑ Ensure that the applications remain available if a single AKS cluster fails.
✑ Ensure that the connection traffic over the internet is encrypted by using SSL without having to configure SSL on each container.
Which service should you include in the recommendation?

  • A. Azure Front Door
  • B. Azure Traffic Manager
  • C. AKS ingress controller
  • D. Azure Load Balancer
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Gowind2
Highly Voted 2 years, 3 months ago
Selected Answer: A
Correct answer A https://docs.microsoft.com/en-us/azure/architecture/guide/technology-choices/load-balancing-overview Front Door is an application delivery network that provides global load balancing and site acceleration service for web applications. It offers Layer 7 capabilities for your application like SSL offload, path-based routing, fast failover, caching, etc. to improve performance and high-availability of your applications. Traffic Manager does not provide SSL Offloading. And the other options are not global options (multi-region)
upvoted 30 times
betterthanlife
1 year, 7 months ago
Agreed, & in fact when you look at AKS baseline for multiregion clusters you'll see Azure Front Door is the, well, um, front door. https://learn.microsoft.com/en-us/azure/architecture/reference-architectures/containers/aks-multi-region/aks-multi-cluster
upvoted 4 times
...
...
taer
Highly Voted 2 years, 2 months ago
Selected Answer: A
Correct answer A
upvoted 5 times
...
SeMo0o0o0o
Most Recent 3 weeks, 1 day ago
Selected Answer: A
A is correct
upvoted 1 times
...
23169fd
5 months, 2 weeks ago
Selected Answer: A
High Availability: Azure Front Door provides global load balancing and failover capabilities. It can route traffic to the closest healthy AKS cluster based on latency or priority, ensuring applications remain available even if one AKS cluster fails. SSL Offloading: Azure Front Door can terminate SSL connections at the edge, meaning it handles SSL/TLS encryption and decryption. This relieves the AKS clusters and their containers from having to manage SSL certificates directly, simplifying deployment and management. Global Scalability: Front Door is designed to handle global-scale traffic and can optimize the delivery of web applications by caching content closer to the users, thereby improving performance and reducing latency.
upvoted 1 times
...
Lazylinux
7 months, 4 weeks ago
Selected Answer: A
AZ FD supports both HTTP and HTTPS and global Traffic Manager is Global but it is DNS based and doesn't encrypt traffic other two are NOT regional more like local i.e. per regions (can be xcross region but you need multiple)
upvoted 3 times
...
Som_triv
1 year, 2 months ago
Correct answer A https://learn.microsoft.com/en-us/azure/architecture/reference-architectures/containers/aks-multi-region/aks-multi-cluster AKS Ingress controller - It is a component of the AKS cluster and not a service to handle traffic between 2 or more AKS clusters. An Ingress controller abstracts away the complexity of Kubernetes application traffic routing and provides a bridge between Kubernetes services and external ones.
upvoted 1 times
...
GS300
1 year, 7 months ago
A is correct, see blueprint: https://learn.microsoft.com/en-us/azure/architecture/reference-architectures/containers/aks-multi-region/aks-multi-cluster
upvoted 1 times
...
sherwindaniel
1 year, 7 months ago
An AKS Ingress controller is a Kubernetes resource that allows the management of external access to the services in an AKS cluster. It provides traffic routing and load balancing for inbound traffic to the applications running in the cluster. By using an AKS Ingress controller, you can ensure that the applications remain available if a single AKS cluster fails. The controller can route traffic to the remaining available AKS cluster(s), ensuring that the application remains available to users. Additionally, an AKS Ingress controller supports SSL/TLS encryption of internet traffic, which ensures that the connection traffic over the internet is encrypted by using SSL without having to configure SSL on each container.
upvoted 2 times
Lazylinux
7 months, 4 weeks ago
Yes correct the above but you missing one thing and that is it is NOT global i.e. different regions, it refers to Single AKS cluster failure failover within the same region
upvoted 2 times
...
sherwindaniel
1 year, 7 months ago
Therefore, an AKS Ingress controller would be a suitable service to include in the recommendation to meet the requirements of ensuring high availability of the applications and encrypted internet traffic. Azure Front Door and Azure Traffic Manager are also services that can be used for traffic routing, but they do not provide SSL encryption natively. Azure Load Balancer can provide traffic routing and load balancing for inbound traffic, but it does not support SSL encryption natively.
upvoted 1 times
...
...
NotMeAnyWay
1 year, 8 months ago
Selected Answer: C
Azure Front Door is also a viable option for providing traffic routing, load balancing, and failover across multiple regions. It can provide SSL termination and caching for faster performance. However, compared to the AKS ingress controller, Azure Front Door is a higher-level service that operates at the HTTP/HTTPS layer and is optimized for HTTP traffic. It is typically used for web applications that require advanced routing, traffic management, and SSL offloading. On the other hand, the AKS ingress controller is a Kubernetes-native solution that operates at the layer 7 (HTTP) and layer 4 (TCP) level, and can provide more granular control over traffic routing and application-level routing rules. Therefore, the choice between Azure Front Door and AKS ingress controller ultimately depends on the specific requirements and characteristics of the applications being deployed. For applications running on Kubernetes, using the AKS ingress controller is often the most straightforward and cost-effective option.
upvoted 3 times
NotMeAnyWay
1 year, 4 months ago
Further Supporting information: A. Azure Front Door. Azure Front Door provides both global load balancing and site acceleration, which would help keep the applications available if a single AKS cluster fails by routing traffic to the other region. In addition, Azure Front Door provides SSL termination at the edge node, closest to the user, This ensures that the connection traffic over the internet is encrypted using SSL, without having to configure SSL on each container. The other options do not meet all the requirements: B. Azure Traffic Manager operates at the DNS level and wouldn't directly handle SSL termination. C. An AKS ingress controller could manage internal Kubernetes networking, but it doesn't handle global load balancing across different Azure regions. D. Azure Load Balancer operates at the transport layer (Layer 4) and would require manual SSL configuration on each container for encryption.
upvoted 1 times
...
...
malcubierre
1 year, 8 months ago
Selected Answer: A
Azure Traffic Manager is at DNS level so you have to configure SSL on every container.... -> Azure Front Door is the choice
upvoted 2 times
...
jj22222
1 year, 9 months ago
Selected Answer: A
azure front door
upvoted 1 times
...
zellck
1 year, 9 months ago
Selected Answer: A
A is the answer. https://learn.microsoft.com/en-us/azure/architecture/guide/technology-choices/load-balancing-overview#azure-load-balancing-services Front Door is an application delivery network that provides global load balancing and site acceleration service for web applications. It offers Layer 7 capabilities for your application like SSL offload, path-based routing, fast failover, caching, etc. to improve performance and high-availability of your applications.
upvoted 2 times
...
totalz
1 year, 9 months ago
I was surprised to find out that Traffic Manager doesn't support https. Can someone provide some good example of its usage?
upvoted 1 times
totalz
1 year, 9 months ago
Please delete the this one and above, that statement is incorrect.
upvoted 2 times
...
...
dagomo
1 year, 10 months ago
Selected Answer: A
https://github.com/phillipgibson/Cloud-Azure-AKS-Using-AFD-with-AKS#using-azure-front-door-service-afd-with-azure-kubernetes-service-aks-walkthrough
upvoted 2 times
...
VBK8579
1 year, 10 months ago
Selected Answer: A
A. Azure Front Door
upvoted 1 times
...
OPT_001122
1 year, 10 months ago
Selected Answer: A
A. Azure Front Door
upvoted 1 times
...
Galron
2 years, 1 month ago
AKS Ingress Controller is part of App GW which is not Global.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...