SC-100: Microsoft Cybersecurity ArchitectDemo

By Microsoft · Question Mode

QuestionQ208

Design security solutions for applications and data

You are designing a security strategy to provide access to Azure App Service web apps through an Azure Front Door instance.

You need to recommend a solution that ensures the web apps allow access only through the Front Door instance.

Solution: You recommend access restrictions that are based on HTTP headers containing the Front Door ID.

Does this satisfy the goal?

  • A Yes
  • B No
Explanation

An App Service access restriction based only on the X-Azure-FDID header can be bypassed by a direct request that supplies the same header. Restricting access to a particular Azure Front Door instance requires both an allow rule for the AzureFrontDoor.Backend service tag and an X-Azure-FDID header restriction.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!