Microsoft Certified Azure Solutions Architect Expert · Free Practice Question Medium
Question 11
Your company has deployed two Azure virtual machines in different regions. Each virtual machine has a public IP address assigned to its network interface. An application is installed on both virtual machines. You must implement load balancing across the virtual machines using Azure Front Door. Additionally, you must ensure that the virtual machine application only accepts traffic routed from Azure Front Door.
What is a way to achieve this requirement?
-
A
Azure Private Link
-
B
Service Endpoints
-
C
Network Security Groups with service tags
-
D
Network Security Groups with application security groups
Reveal correct answer
Correct answer: C
A. Azure Private Link is used to securely connect Azure PaaS services to virtual networks. It is not directly related to implementing load balancing across virtual machines using Azure Front Door or restricting traffic to only come from Azure Front Door.
B. Service Endpoints allow you to secure Azure service resources to your virtual network. While this can help with securing access to Azure services, it is not the most suitable option for implementing load balancing across virtual machines using Azure Front Door and restricting traffic to only come from Azure Front Door.
C. Network Security Groups (NSGs) with service tags allow you to define security rules based on predefined Azure service tags. By configuring NSGs with service tags, you can restrict traffic to only come from Azure Front Door and implement load balancing across virtual machines. This option aligns with the requirement provided in the question.
D. Network Security Groups (NSGs) with application security groups allow you to define security rules based on application-specific criteria. While this can help with securing access to specific applications, it is not the most suitable option for implementing load balancing across virtual machines using Azure Front Door and restricting traffic to only come from Azure Front Door.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
