You are designing a zone-resilient architecture for a high-throughput API hosted on virtual machines behind a layer 7 gateway. The solution must survive a single availability zone failure without changing the public IP, distribute compute across zones, and terminate TLS at the gateway. What should you design? Choose two.

To ensure zone resiliency for the API and maintain the public IP, Application Gateway v2 must be deployed as zone-redundant with a zone-redundant Standard public IP. This configuration allows the gateway to survive a single availability zone failure and maintain the same public IP address. For the backend VMs, a virtual machine scale set spanning multiple availability zones is necessary to distribute compute resources across zones and ensure application availability if one zone fails. Placing all VMs in a single availability set in one zone would not provide zone resiliency. A single-zone Application Gateway or a Basic SKU public IP with Traffic Manager would not meet the requirements for zone redundancy with a consistent public IP.