SC-100: Microsoft Cybersecurity ArchitectDemo

By Microsoft · Question Mode

QuestionQ211

Design security solutions for applications and data

You are designing a security strategy to provide access to Azure App Service web apps through an Azure Front Door instance.

You need to recommend a solution that ensures the web apps allow access only through the Front Door instance.

Solution: You recommend access restrictions that are based on HTTP headers containing the Front Door ID.

Does this meet the goal?

  • A Yes
  • B No
Explanation

App Service HTTP-header filters are evaluated only in addition to the access-restriction rule’s source condition. To ensure that an app is reached only through a specific Azure Front Door instance, allow the AzureFrontDoor.Backend service tag and require the matching X-Azure-FDID header; a header-only restriction does not prevent direct spoofed requests.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!