AZ-900 Describe Azure architecture and services Practice Question
A company runs a web application on Azure App Service. They want to improve performance by caching static content and frequently accessed data closer to users in different geographic locations. Which Azure service should they use?
⚠ Common exam trap
It's easy for candidates to confuse Azure Traffic Manager's 'performance' routing (which directs users to the nearest regional endpoint) with actual content caching, but Traffic Manager does not cache data—it only routes requests to the origin server closest to the user.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Azure Content Delivery Network
Azure Content Delivery Network (CDN) caches static content and frequently accessed data at edge nodes located closer to users, reducing latency and improving performance for geographically distributed audiences. This directly addresses the requirement to serve cached content from locations near the end users, offloading origin traffic from the App Service.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure Traffic Manager
Why it's wrong here
Azure Traffic Manager is DNS-based load balancer that routes incoming traffic to healthy endpoints based on policies like performance or priority. It operates only at the DNS resolution level, directing users to a region, and does not store or cache any application content. As a result, it cannot reduce latency by serving cached objects from an edge location; it merely chooses which origin should handle the request.
When this WOULD be correct
A company wants to distribute incoming web traffic across multiple Azure regions to ensure high availability and low latency by routing users to the nearest endpoint based on geographic location or performance, without needing content caching.
- ✗
Azure Application Gateway
Why it's wrong here
Azure Application Gateway is a regional layer-7 load balancer that operates within a single Azure region. It provides SSL termination, URL-based routing, and Web Application Firewall (WAF), but it does not cache content at geographically distributed edge locations. While it can improve performance by routing traffic intelligently, it lacks the global edge-persistent caching required to accelerate content delivery to users worldwide.
When this WOULD be correct
A company needs to route HTTP traffic based on URL path or host headers, and requires SSL termination, cookie-based session affinity, or a web application firewall to protect against common web vulnerabilities.
- ✓
Azure Content Delivery Network
Why this is correct
Azure Content Delivery Network (CDN) is the dedicated caching service that stores static and dynamic content at edge servers in global points-of-presence (PoPs). By caching responses closer to users, it significantly reduces latency, offloads bandwidth from the origin App Service, and improves international load times. CDN is purpose-built for this workload, offering rules-based caching, cache expiration controls, and purge capabilities, making it the correct choice.
- ✗
Azure Front Door
Why it's wrong here
Azure Front Door is a global layer-7 service that performs load balancing, health probing, and SSL offloading at edge locations. Although it includes optional caching capabilities, its primary function is intelligent routing and acceleration across regions, not serving as a dedicated content cache. For a straightforward caching requirement, CDN is the simpler and more purpose-aligned service, whereas Front Door introduces overlapping routing features that are unnecessary here.
When this WOULD be correct
A company wants to improve performance and provide global load balancing for a web application with automatic failover, SSL termination, and URL-path-based routing across multiple Azure regions.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-900 exam frequently reuses these exact scenarios with slightly different constraints.
✓Azure Content Delivery NetworkCorrect answer▾
Why this is correct
Azure Content Delivery Network (CDN) is the dedicated caching service that stores static and dynamic content at edge servers in global points-of-presence (PoPs). By caching responses closer to users, it significantly reduces latency, offloads bandwidth from the origin App Service, and improves international load times. CDN is purpose-built for this workload, offering rules-based caching, cache expiration controls, and purge capabilities, making it the correct choice.
✗Azure Traffic ManagerWrong answer — click to see why▾
Why this is wrong here
Azure Traffic Manager is a DNS-based traffic load balancer that distributes incoming traffic across multiple endpoints based on routing methods (e.g., performance, priority), but it does not cache static content or serve data from edge locations closer to users.
★ When this WOULD be the correct answer
A company wants to distribute incoming web traffic across multiple Azure regions to ensure high availability and low latency by routing users to the nearest endpoint based on geographic location or performance, without needing content caching.
Why candidates choose this
Candidates may confuse Traffic Manager's ability to route users to the nearest region with the caching and edge delivery capabilities of a CDN, assuming it improves performance for static content.
✗Azure Application GatewayWrong answer — click to see why▾
Why this is wrong here
Azure Application Gateway is a layer 7 load balancer and web application firewall, not a caching service. It does not cache static content or distribute data geographically for performance improvement.
★ When this WOULD be the correct answer
A company needs to route HTTP traffic based on URL path or host headers, and requires SSL termination, cookie-based session affinity, or a web application firewall to protect against common web vulnerabilities.
Why candidates choose this
Candidates may confuse Application Gateway's traffic management and routing capabilities with content delivery and caching, or think its 'application delivery' function includes caching.
✗Azure Front DoorWrong answer — click to see why▾
Why this is wrong here
Azure Front Door is a global load balancer and application delivery controller that provides SSL offload, path-based routing, and WAF, but it does not primarily cache static content at edge locations like a CDN does.
★ When this WOULD be the correct answer
A company wants to improve performance and provide global load balancing for a web application with automatic failover, SSL termination, and URL-path-based routing across multiple Azure regions.
Why candidates choose this
Candidates may confuse Front Door's global edge presence and caching capabilities with a dedicated CDN service, not realizing Front Door's primary focus is on application delivery and load balancing rather than static content caching.
Analysis generated from the official AZ-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
About these practice questions
Courseiva writes every AZ-900 question from scratch — 981 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.