AZ-900 Describe Azure architecture and services Practice Question
Which Azure service acts as a global load balancer that optimizes routing of user traffic to the nearest Azure endpoint for the best performance?
⚠ Common exam trap
Watch out — candidates often confuse Azure Traffic Manager (DNS-based global routing) with Azure Front Door (application-layer global load balancing with performance optimization), but Traffic Manager does not provide the same low-latency routing or edge acceleration that Front Door offers.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Azure Front Door
Azure Front Door is a global, scalable entry point that uses the Microsoft global edge network to route user traffic to the nearest available Azure endpoint based on latency and geographic proximity. It provides HTTP/HTTPS load balancing with advanced traffic acceleration, SSL offload, and application-layer security, making it the correct choice for optimizing performance across global regions.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure Application Gateway
Why it's wrong here
Azure Application Gateway is a regional web traffic load balancer that does work at layer 7, enabling cookie-based sessions, URL-path routing, and TLS termination for web applications. However, its deployment is scoped to a single Azure region, so it cannot route users across geographically distributed backends or provide global failover. For a global HTTP-based load balancing need, Front Door extends those same layer 7 functions across the entire world.
- ✗
Azure Traffic Manager
Why it's wrong here
Azure Traffic Manager performs global routing at the DNS level, directing clients to different endpoints based on policy, geographic, or latency metrics without ever examining HTTP request details. Although it does support global schemes, it simply returns a DNS answer and relies on DNS TTLs for failover, lacking layer 7 features like TLS termination, WAF, or URL-specific path matching that Front Door provides. Hence it offers global distribution but not true HTTP-level load balancing.
- ✓
Azure Front Door
Why this is correct
Azure Front Door is a global, layer 7 (HTTP/HTTPS) load balancer that uses Microsoft's global edge network to route user requests to the fastest, nearest healthy backend. It provides advanced capabilities like SSL offloading, Web Application Firewall integration, URL-path and host-based routing, and real-time failover across regional backends. This makes it the only option that combines global reach with application-layer intelligence for optimal performance.
- ✗
Azure Load Balancer
Why it's wrong here
Azure Load Balancer operates at layer 4 of the OSI model, only forwarding TCP/UDP traffic based on IP addresses, ports, and distribution rules; it does not inspect HTTP content or route on URL paths. It is also regional by nature, meaning it distributes traffic among virtual machines only within a single Azure region, without any global failover or latency-based routing. Therefore, it cannot meet the requirement of global HTTP load balancing.
Go deeper
Related to this question
Learn chapter
Azure Regions and Geographies
Key term
Edge network
An edge network is a distributed computing architecture that brings data processing and storage closer to the physical location where data is generated, rather than relying on a central data center.
Key term
User
A user is any person, system, or device that interacts with an IT service, resource, or identity system, typically authenticated through credentials and authorized to perform specific actions.
About these practice questions
Courseiva writes every AZ-900 question from scratch — 981 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.