Cloud · Microsoft Azure · Certifications
AZ-500: Regional TLS termination and path routing
Select one answer. Your result and the explanation will appear immediately.
Question 3
Your company runs a web app called AppSecure that delivers product images and videos via https://appsecure.contoso.com. It uses two backend pools: Pool1 for images and Pool2 for videos. To improve performance, you want to offload TLS decryption and route requests based on URL paths at the regional level. Which Azure service should you use?
Correct answer: Use Azure Application Gateway for TLS termination and path-based routing.
Azure Application Gateway is a regional Layer 7 load balancer. It can terminate TLS at the gateway and use URL path-based routing rules to send image requests to Pool1 and video requests to Pool2.
Exam clue: “TLS decryption”, “URL paths”, “backend pools”, and “regional level” point directly to Application Gateway.
Remember: Application Gateway is regional and Layer 7. Azure Front Door is the global Layer 7 option, while Traffic Manager only directs traffic at the DNS layer and cannot terminate TLS or inspect URL paths.