AZ-800 AZ-800 - Microsoft Azure Networking Solutions Load Balancer and Azure Front Door Questions and Answers 2 — Questions and Answers
Question 1: Which protocol does Azure Load Balancer use for health probes when you need to verify HTTP endpoint availability?
- ICMP
- TCP
- HTTP/HTTPS (Correct answer)
- UDP
Correct answer: HTTP/HTTPS
Azure Load Balancer health probes support TCP, HTTP, and HTTPS protocols; ICMP ping is not supported.
Question 2: You need global load balancing across Azure regions with anycast routing. Which service should you use?
- Azure Internal Load Balancer
- Azure Standard Load Balancer
- Azure Front Door (Correct answer)
- Azure Traffic Manager
Correct answer: Azure Front Door
Azure Front Door uses Microsoft's anycast global network to route users to the nearest PoP and then to the healthiest backend region.
Question 3: What is the purpose of an outbound rule in Azure Standard Load Balancer?
- Route inbound traffic to backends
- Allow VMs without public IPs to initiate outbound internet connections through the LB public IP (Correct answer)
- Enable health probes for backend VMs
- Configure session persistence for clients
Correct answer: Allow VMs without public IPs to initiate outbound internet connections through the LB public IP
Outbound rules explicitly configure SNAT for backend pool members, providing controlled outbound internet connectivity via the load balancer's public IP.
Question 4: Which Azure Front Door component evaluates request conditions and executes actions like URL rewrites or redirects?
- Origin Group
- Health Probe
- Rules Engine (Correct answer)
- WAF Policy
Correct answer: Rules Engine
The Azure Front Door Rules Engine matches request conditions (headers, paths, methods) and applies actions such as URL rewrite, redirect, or header modification.
Question 5: An Azure Internal Load Balancer frontend is configured with IP address 10.0.1.100. Where is this IP allocated from?
- A public IP prefix
- The subnet's address space of the load balancer's frontend configuration (Correct answer)
- A globally unique Azure IP pool
- The backend VM's NIC directly
Correct answer: The subnet's address space of the load balancer's frontend configuration
An Internal Load Balancer frontend IP is drawn from the address space of the subnet specified in its frontend IP configuration, keeping it private.
Question 6: What does session persistence (sticky sessions) set to 'Client IP' in Azure Load Balancer change about the hashing algorithm?
- Switches from 5-tuple to 3-tuple hash (source IP, destination IP, protocol) (Correct answer)
- Disables hashing and uses round robin
- Uses only destination port for routing
- Enables DSR mode automatically
Correct answer: Switches from 5-tuple to 3-tuple hash (source IP, destination IP, protocol)
Setting session persistence to Client IP switches from 5-tuple to 2-tuple hash (source IP + destination IP), ensuring the same client always reaches the same backend.
AZ-800 AZ-800 - Microsoft Azure Networking Solutions Load Balancer and Azure Front Door Questions and Answers 2
Which protocol does Azure Load Balancer use for health probes when you need to verify HTTP endpoint availability?