SC-100: Microsoft Cybersecurity ArchitectDemo

By Microsoft · Question Mode

QuestionQ263

Design security solutions for applications and data

You have an Azure subscription containing App Service apps in four Azure regions, which users access from the internet.

You plan to block requests to the apps when those requests contain security threats specified by the Open Web Application Security Project (OWASP) Core Rule Set (CRS).

Design a solution that blocks the requests and meets these requirements:

  • Maintain access to the apps during a regional outage.
  • Minimize the number of required resources.

What should the design include?

Select
Resource type to provision:
Option to enable:
Explanation

Azure Front Door provides a global entry point and can route traffic to App Service origins in multiple regions, enabling continued service when an origin region is unavailable. Enabling Azure Web Application Firewall (WAF) on Front Door applies managed OWASP Core Rule Set protections and can block malicious web requests. This uses one global Front Door/WAF deployment instead of regional Application Gateway resources.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!