You will deploy 10 applications across two AKS clusters, each in a different Azure region. The deployment must keep applications available if a single AKS cluster fails and must encrypt internet-facing traffic using SSL without configuring SSL in each container. Which service should you include in the design?

Azure Front Door is the correct choice because it provides global traffic routing, high availability across regions, and SSL offloading at the edge. This ensures applications remain available even if one AKS cluster fails, and encrypts internet-facing traffic without requiring SSL configuration within each container. Azure Traffic Manager only performs DNS-level routing and doesn't offer SSL offloading. An AKS ingress controller manages traffic within a single cluster, not across regions, and requires SSL configuration per cluster. Azure Load Balancer operates at a single region and doesn't provide global failover or SSL offloading for internet-facing traffic.