Microsoft Azure Architect Design (legacy) — Question 49

You plan to deploy 10 applications to Azure. The applications will be deployed to two Azure Kubernetes Service (AKS) clusters. Each cluster will be deployed to a separate Azure region.
The application deployment must meet the following requirements:
✑ Ensure that the applications remain available if a single AKS cluster fails.
✑ Ensure that the connection traffic over the internet is encrypted by using SSL without having to configure SSL on each container instance.
Which Azure service should you include in the recommendation?

Answer options

Correct answer: A

Explanation

Azure Front Door is the correct choice as it provides SSL termination at the edge, ensuring encrypted traffic without configuring each container. Azure Traffic Manager focuses on routing traffic and does not handle SSL termination. Azure Load Balancer operates at the transport layer and does not provide SSL capabilities. An AKS ingress controller can manage traffic but typically requires additional SSL configuration on each service.