AZ-900 Describe Azure architecture and services Practice Question
Which Azure networking service provides a distributed, highly available, and scalable DNS service for routing users to the best-performing endpoint?
⚠ Common exam trap
Watch out — candidates often confuse Azure Front Door (which also provides global routing and performance optimization) with Traffic Manager, but Front Door operates at the application layer (HTTP/HTTPS) and proxies traffic, while Traffic Manager is purely DNS-based and works with any protocol.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Azure Traffic Manager
Azure Traffic Manager is a DNS-based traffic load balancer that distributes traffic to the best-performing endpoint across global Azure regions. It uses DNS responses to direct users to the endpoint with the lowest latency or highest priority, providing high availability and scalability without proxying traffic.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure Front Door
Why it's wrong here
Azure Front Door is a global layer 7 (HTTP/HTTPS) service that uses anycast to route web traffic based on URL path, host header, or other application-level attributes. It offers caching, SSL offload, and web application firewall, but it does not perform DNS-based endpoint selection across multiple non-HTTP endpoints. It is wrong here because Traffic Manager's purpose is purely DNS-level global routing, independent of application protocol.
- ✓
Azure Traffic Manager
Why this is correct
Azure Traffic Manager is the correct answer because it operates at the DNS layer, resolving domain names to the best available endpoint based on routing methods such as performance, failover, geographic, weighted, or multi-value. It does not sit in the data path; instead, it returns an IP address to the client's DNS resolver, making it a true global DNS-based load balancer. This contrasts with regional or layer 7 services that inspect traffic or terminate connections.
- ✗
Azure Load Balancer
Why it's wrong here
Azure Load Balancer is a regional layer 4 (TCP/UDP) load balancer that distributes traffic within a single Azure region to VMs in a backend pool. It supports high-availability ports and health probes, but it cannot route traffic across Azure regions or use DNS-based policies like geographic or performance routing. Therefore, it is incorrect because it lacks the global DNS-based routing capability that Traffic Manager provides.
- ✗
Azure Application Gateway
Why it's wrong here
Azure Application Gateway is a regional layer 7 load balancer that handles HTTP/HTTPS traffic with URL-path based routing, TLS termination, and cookie-based session affinity. It operates within one region and is typically used for web application traffic, not for global multi-region failover or geographic DNS resolution. It is wrong because it does not provide DNS-based global routing; that is exactly what Traffic Manager does.
Go deeper
Related to this question
Learn chapter
Azure Regions and Geographies
Key term
Availability
Availability is the measure of how often a system or service is operational and accessible when needed, typically expressed as a percentage of uptime.
Key term
Azure Traffic Manager
Azure Traffic Manager is a DNS-based traffic load balancer that directs incoming web traffic to the most appropriate endpoint based on performance, priority, geographic location, or a weighted distribution method.
About these practice questions
Courseiva writes every AZ-900 question from scratch — 981 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.