A lock-booking web app in one region needs path-based routing, a private backend pool of VMs, and a single public HTTPS listener. Which service should the security engineer choose?
Select an answer to reveal the explanation.
Short Explanation
One region, path-based routes, private VM pool, public HTTPS listener—that’s Application Gateway. Firewall isn’t an L7 reverse proxy, and Front Door is the global anycast story.
Full Explanation
Azure Application Gateway provides regional Layer-7 reverse proxy features including path-based routing, HTTPS listeners, and backend pools that can be private VMs. Azure Firewall is not an HTTP reverse proxy for application path routing. Azure Front Door is the global anycast L7/CDN entry point and is the next skill when multi-region edge is required. Bastion is for administrative access, not public application hosting.