Bird
Raised Fist0
Azurecloud~10 mins

Load Balancer vs Application Gateway decision in Azure - Interactive Practice

Choose your learning style10 modes available
LearnWhyDeepVisualTryChallengeProjectRecallTime

Start learning this pattern below

Jump into concepts and practice - no test required

or
Recommended
Test this pattern10 questions across easy, medium, and hard to know if this pattern is strong
Practice - 5 Tasks
Answer the questions below
1fill in blank
easy

Complete the code to choose the Azure service that operates at Layer 4 of the OSI model.

Azure
The Azure [1] is a load balancing service that works at the transport layer (Layer 4).
Drag options to blanks, or click blank then click option'
ATraffic Manager
BApplication Gateway
CLoad Balancer
DFront Door
Attempts:
3 left
💡 Hint
Common Mistakes
Confusing Application Gateway with Load Balancer because both distribute traffic.
Choosing Traffic Manager which is DNS-based, not Layer 4.
2fill in blank
medium

Complete the code to select the Azure service that supports Web Application Firewall (WAF).

Azure
To protect web applications from common threats, use Azure [1] which includes WAF capabilities.
Drag options to blanks, or click blank then click option'
ALoad Balancer
BApplication Gateway
CTraffic Manager
DVirtual Network
Attempts:
3 left
💡 Hint
Common Mistakes
Selecting Load Balancer which does not have WAF.
Confusing Traffic Manager which is DNS-based and does not inspect traffic.
3fill in blank
hard

Fix the error in the statement about Azure Load Balancer's traffic handling.

Azure
Azure Load Balancer routes traffic based on [1] information like URL paths.
Drag options to blanks, or click blank then click option'
AIP and port
BURL path
CHTTP headers
DCookies
Attempts:
3 left
💡 Hint
Common Mistakes
Thinking Load Balancer can route based on URL paths or headers.
Confusing Layer 4 and Layer 7 routing capabilities.
4fill in blank
hard

Fill both blanks to complete the sentence about Azure Application Gateway features.

Azure
Azure Application Gateway supports [1] routing and integrates with [2] for SSL termination.
Drag options to blanks, or click blank then click option'
AURL-based
BIP-based
CAzure Key Vault
DAzure Blob Storage
Attempts:
3 left
💡 Hint
Common Mistakes
Choosing IP-based routing which is for Load Balancer.
Selecting Blob Storage which is not used for SSL certificates.
5fill in blank
hard

Fill all three blanks to complete the decision criteria for choosing between Load Balancer and Application Gateway.

Azure
Use Load Balancer for [1] traffic, Application Gateway for [2] traffic, and Application Gateway when you need [3].
Drag options to blanks, or click blank then click option'
ATCP/UDP
BHTTP/HTTPS
CWAF protection
DDNS routing
Attempts:
3 left
💡 Hint
Common Mistakes
Mixing DNS routing which is handled by Traffic Manager, not these services.
Confusing TCP/UDP with HTTP/HTTPS traffic types.

Practice

(1/5)
1. Which Azure service is best suited for distributing simple network traffic quickly without inspecting the content?
easy
A. Azure Front Door
B. Azure Application Gateway
C. Azure Traffic Manager
D. Azure Load Balancer

Solution

  1. Step 1: Understand the role of Azure Load Balancer

    Azure Load Balancer distributes incoming network traffic at the transport layer quickly without inspecting the content.

  2. Step 2: Compare with Application Gateway

    Application Gateway works at the application layer and inspects traffic for web routing and security, which is more complex.

  3. Final Answer:

    Azure Load Balancer -> Option D

  4. Quick Check:

    Simple network traffic distribution = Azure Load Balancer [OK]
Hint: Simple fast traffic? Choose Load Balancer [OK]
Common Mistakes:
  • Confusing Application Gateway with Load Balancer for simple traffic
  • Choosing Traffic Manager which is DNS-based, not load balancing
  • Assuming Front Door is for basic network traffic
2. Which of the following is the correct Azure service to use when you need SSL termination and web application firewall features?
easy
A. Azure Application Gateway
B. Azure Load Balancer
C. Azure Virtual Network
D. Azure Blob Storage

Solution

  1. Step 1: Identify SSL termination and WAF support

    Azure Application Gateway supports SSL termination and has a built-in Web Application Firewall (WAF).

  2. Step 2: Exclude other options

    Load Balancer does not support SSL termination or WAF. Virtual Network and Blob Storage are unrelated services.

  3. Final Answer:

    Azure Application Gateway -> Option A

  4. Quick Check:

    SSL termination + WAF = Application Gateway [OK]
Hint: SSL termination needs Application Gateway [OK]
Common Mistakes:
  • Choosing Load Balancer for SSL termination
  • Confusing Virtual Network as a load balancer
  • Selecting Blob Storage which is for data storage
3. Consider a web app that requires URL-based routing to different backend pools and needs to inspect HTTP headers. Which Azure service will correctly handle this scenario?
medium
A. Azure Application Gateway
B. Azure DNS
C. Azure Load Balancer
D. Azure Content Delivery Network

Solution

  1. Step 1: Analyze URL-based routing and HTTP header inspection needs

    These features require application layer (Layer 7) processing, which Azure Application Gateway provides.

  2. Step 2: Exclude other services

    Load Balancer works at Layer 4 and cannot inspect HTTP headers or route based on URL. DNS and CDN do not perform routing to backend pools.

  3. Final Answer:

    Azure Application Gateway -> Option A

  4. Quick Check:

    URL routing + header inspection = Application Gateway [OK]
Hint: URL routing needs Application Gateway [OK]
Common Mistakes:
  • Choosing Load Balancer for URL routing
  • Confusing DNS with traffic routing
  • Assuming CDN handles backend routing
4. You configured an Azure Load Balancer but your web app requires SSL offloading and WAF protection. What is the main issue and how to fix it?
medium
A. WAF is enabled by default on Load Balancer; disable it
B. Load Balancer needs extra SSL certificates; add them to Load Balancer
C. Load Balancer does not support SSL offloading; switch to Application Gateway
D. Load Balancer supports SSL offloading; check backend app configuration

Solution

  1. Step 1: Identify Load Balancer capabilities

    Azure Load Balancer does not support SSL offloading or WAF features.

  2. Step 2: Recommend correct service

    Application Gateway supports SSL offloading and WAF, so switching is necessary.

  3. Final Answer:

    Load Balancer does not support SSL offloading; switch to Application Gateway -> Option C

  4. Quick Check:

    SSL offloading + WAF need Application Gateway [OK]
Hint: SSL offloading needs Application Gateway, not Load Balancer [OK]
Common Mistakes:
  • Trying to add SSL certs to Load Balancer
  • Assuming WAF is on Load Balancer by default
  • Ignoring backend app SSL settings
5. You are designing a scalable web application that requires fast network traffic distribution, SSL termination, URL-based routing, and protection against common web attacks. Which Azure architecture should you choose?
hard
A. Use Azure Load Balancer for traffic and add Azure Firewall for security
B. Use Azure Application Gateway for all traffic management and security features
C. Use Azure Traffic Manager with Azure Load Balancer for SSL termination
D. Use Azure Front Door only for all routing and security needs

Solution

  1. Step 1: Match requirements to service features

    Fast network distribution, SSL termination, URL routing, and WAF protection are all provided by Azure Application Gateway.

  2. Step 2: Evaluate other options

    Load Balancer lacks SSL termination and WAF; Traffic Manager does DNS routing only; Front Door is global but may not fit all needs here.

  3. Final Answer:

    Use Azure Application Gateway for all traffic management and security features -> Option B

  4. Quick Check:

    All-in-one routing + SSL + WAF = Application Gateway [OK]
Hint: All features together? Pick Application Gateway [OK]
Common Mistakes:
  • Choosing Load Balancer without SSL or WAF
  • Confusing Traffic Manager with SSL termination
  • Assuming Front Door replaces Application Gateway fully