AZ-900 Describe Azure architecture and services Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Azure Load Balancer

  Why this is correct

  Correct. Azure Load Balancer operates at Layer 4 (TCP/UDP) of the OSI model, forwarding network traffic to backend VM instances based on configured rules and health probes. It is the simplest and most efficient way to distribute inbound traffic across VMs within a single region, including across availability zones, without adding HTTP-level features or DNS-level indirection.

• ✗

  Azure Application Gateway

  Why it's wrong here

  Incorrect. Azure Application Gateway is a Layer 7 load balancer that handles HTTP/HTTPS traffic with advanced features such as URL path routing, host-based routing, SSL termination, and an integrated web application firewall. While it can distribute traffic across VMs within a region, it is more complex and over-engineered than Azure Load Balancer for basic TCP/UDP distribution across availability zones, making it the wrong choice when simplicity is required.

  When this WOULD be correct

  A company deploys a web application on Azure VMs and needs to route HTTP traffic based on URL path or host headers, and also requires SSL termination and web application firewall (WAF) protection. In this scenario, Azure Application Gateway is the correct choice.

• ✗

  Azure Traffic Manager

  Why it's wrong here

  Incorrect. Azure Traffic Manager is a DNS-based traffic router that directs users to the most appropriate regional endpoint based on performance, priority, or geographic proximity. It operates at the DNS resolution level and does not inspect network packets or distribute load among VMs within a single region; it can only route traffic across regions, making it irrelevant for intra-region, availability-zone-level load balancing.

  When this WOULD be correct

  A company deploys web applications in multiple Azure regions (e.g., East US and West Europe) and needs to distribute incoming traffic across regions for global load balancing and failover. Azure Traffic Manager would be the correct service to route users to the nearest or healthiest regional endpoint.

• ✗

  Azure Front Door

  Why it's wrong here

  Incorrect. Azure Front Door is a global application delivery platform that routes HTTP/HTTPS traffic across multiple regions using the Microsoft global edge network with anycast. It provides global acceleration, path-based routing, and web application firewall capabilities, but it is designed for internet-facing, multi-region scenarios, not for low-latency distribution among VMs placed within availability zones in a single region.

  When this WOULD be correct

  A company has a global web application deployed in multiple Azure regions and needs to route user traffic to the nearest region for low latency and high availability, with SSL termination and web application firewall capabilities.

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-900 exam frequently reuses these exact scenarios with slightly different constraints.

Analysis generated from the official AZ-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”

Go deeper

Related to this question