Microsoft Azure Architect Technologies (2020, legacy) — Question 9

You have Azure virtual machines deployed to three Azure regions. Each region contains a single virtual network that has four virtual machines on the same subnet. Each virtual machine runs an application named App1. App1 is accessible by using HTTPS. Currently, the virtual machines are inaccessible from the internet.
You need to use Azure Front Door to load balance requests for App1 across all the virtual machines.
Which additional Azure service should you provision?

Answer options

• A. Azure Traffic Manager
• B. an internal Azure Load Balancer
• C. a public Azure Load Balancer
• D. Azure Private Link

Correct answer: C

Explanation

The correct answer is C because a public Azure Load Balancer is necessary to provide internet access to the VMs, enabling Azure Front Door to route traffic to them. Options A and B are not suitable since Azure Traffic Manager is for DNS-based traffic routing and an internal Load Balancer does not expose services to the internet. Azure Private Link (option D) is used for private connectivity and does not help with internet accessibility.