You will deploy an Azure App Service web application with instances across multiple Azure regions. The load-balancing solution must: remain available during a regional outage; support Azure Web Application Firewall (WAF); support cookie-based affinity; and support URL-based routing. Which Azure service should you recommend?

Azure Front Door is the correct choice because it is a global, scalable entry-point that uses the Microsoft global edge network to create fast, secure, and widely scalable web applications. It offers regional outage resilience, integrated WAF capabilities, cookie-based session affinity, and URL-based routing. Azure Traffic Manager provides DNS-based global load balancing but lacks WAF, cookie affinity, and URL routing. Azure Application Gateway offers WAF, cookie affinity, and URL routing, but it is a regional service, not global, and would not provide resilience during a regional outage without additional services. Azure Load Balancer is a Layer 4 (TCP/UDP) load balancer and does not support WAF, cookie affinity, or URL-based routing.