You plan to deploy multiple instances of an Azure web app across several Azure regions. You need to design an access solution for the app. The…

Azure Traffic Manager is a DNS-based traffic load balancer. It successfully meets the requirements to balance requests across regional instances and provide high availability through endpoint monitoring and failover. However, Traffic Manager operates at the DNS layer and does not inspect the actual traffic flowing to the application. Because it does not process the HTTP/S requests, it cannot natively implement rate limiting, which is a Layer 7 (application layer) function. To meet all requirements, a service like Azure Front Door, which provides global load balancing and includes a Web Application Firewall (WAF) for rate limiting, would be necessary.

A. Yes: This is incorrect because the solution fails to meet the mandatory requirement of supporting rate limiting, as Azure Traffic Manager is a DNS-level service.

1. Microsoft Learn

"What is Traffic Manager?"

Section: Introduction

Content: "Azure Traffic Manager is a DNS-based traffic load balancer. This service allows you to distribute traffic to your public facing applications across the global Azure regions." This establishes that Traffic Manager works at the DNS level

resolving a domain name to an IP address

but does not process the subsequent traffic.

2. Microsoft Learn

"Load-balancing options"

Section: "Choose a load-balancing service" -> "Feature comparison" table.

Content: The feature comparison table explicitly shows that Azure Traffic Manager does not support "Web Application Firewall (WAF)" capabilities

which include rate limiting. In contrast

services like Azure Front Door and Azure Application Gateway are shown to support WAF.

3. Microsoft Learn

"Rate limiting with Azure Front Door"

Section: "What is a web application firewall rate limit rule on Azure Front Door?"

Content: "A rate limit rule for Azure Front Door controls the number of requests allowed from a particular client IP address to your application during a one-minute duration." This document demonstrates that rate limiting is a feature of Azure Front Door's WAF

not Traffic Manager.