AZ-305 Design business continuity solutions Practice Question
Which TWO Azure services can be used to provide cross-region disaster recovery for Azure App Service web applications with a custom domain? (Select TWO.)
⚠ Common exam trap
It's easy for candidates to confuse Azure DNS (a domain registration and resolution service) with Traffic Manager (a DNS-based traffic routing service), or assume Azure Application Gateway can route cross-region traffic when it is strictly regional.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Azure Front Door
Azure Front Door (B) provides global load balancing and traffic routing based on latency or priority, enabling cross-region failover for App Service web applications. It supports custom domains with TLS termination and health probes to automatically redirect traffic to a secondary region during a disaster. Azure Traffic Manager (E) also offers DNS-based traffic routing with priority or performance profiles, allowing failover to a secondary App Service instance in another region, and works with custom domains via CNAME records.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure DNS
Why it's wrong here
Azure DNS is a hosting service for DNS domains that provides name resolution via the public DNS hierarchy; it does not inspect HTTP/HTTPS traffic or route requests based on endpoint health, latency, or geographic location. While DNS can be used to point at a static IP, it offers no automatic failover or cross-region load-balancing decisions on its own. Therefore, it cannot serve as a cross-region traffic routing service in the way the question requires.
- ✓
Azure Front Door
Why this is correct
Azure Front Door is a global, cloud-native entry point that uses anycast with the Microsoft global edge network to route HTTP/HTTPS traffic to the nearest healthy origin. It performs global load balancing, automatic failover, TLS termination, URL-based routing, and health probes at the application layer (L7). Its ability to monitor multiple regional backends and shift traffic instantly in response to health checks makes it a correct answer for providing cross-region resiliency.
- ✗
Azure CDN
Why it's wrong here
Azure CDN is primarily a content delivery network that caches static objects (images, videos, files) at edge locations to reduce latency and origin load. It can accelerate dynamic content but does not provide active-active or active-passive load balancing across regional application backends, nor does it perform health-based failover for application availability. Caching can mask an outage for cached content, but it is not a disaster recovery or cross-region routing service.
- ✗
Azure Application Gateway
Why it's wrong here
Azure Application Gateway is a regional Layer 7 load balancer that operates inside a single Azure region and a single virtual network. It can route traffic to a backend pool, perform cookie-based session affinity, and do URL path-based routing, but it cannot spread traffic across regions or automatically fail over to a secondary region without additional services. Its regional scope disqualifies it from providing cross-region redundancy by itself.
- ✓
Azure Traffic Manager
Why this is correct
Azure Traffic Manager is a DNS-based L7 traffic router that directs requests to the correct regional endpoint using DNS responses, based on routing methods such as performance, priority, weighted, or geographic. It performs health checks on endpoints and automatically fails over to a secondary endpoint when the primary becomes unhealthy, enabling cross-region disaster recovery. Because it operates at the DNS level rather than the application layer, it is a valid, but different, cross-region routing service compared to Front Door.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every AZ-305 question from scratch — 212 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-305 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-305 exam.