SC-100 · Question #184
You have an Azure subscription. You have a DNS domain named contoso.com that is hosted by a third-party DNS registrar. Developers use Azure DevOps to deploy web apps to App Service Environments. When
The correct answer is C. Microsoft Defender for App Service. Defender for App Service identifies any DNS entries remaining in your DNS registrar when an App Service website is decommissioned - these are known as dangling DNS entries. https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-app-service- introduction#dangling-
Question
You have an Azure subscription. You have a DNS domain named contoso.com that is hosted by a third-party DNS registrar. Developers use Azure DevOps to deploy web apps to App Service Environments. When a new app is deployed, a CNAME record for the app is registered in contoso.com. You need to recommend a solution to secure the DNS record for each web app. The solution must meet the following requirements:
- Ensure that when an app is deleted, the CNAME record for the app is
removed also.
- Minimize administrative effort.
What should you include in the recommendation?
Options
- AMicrosoft Defender for Cloud Apps
- BMicrosoft Defender for DevOps
- CMicrosoft Defender for App Service
- DMicrosoft Defender for DNS
How the community answered
(49 responses)- A4% (2)
- B6% (3)
- C80% (39)
- D10% (5)
Explanation
Defender for App Service identifies any DNS entries remaining in your DNS registrar when an App Service website is decommissioned - these are known as dangling DNS entries. https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-app-service- introduction#dangling-dns-detection Microsoft Defender for DNS provides an additional layer of protection for resources that use Azure DNS's Azure-provided name resolution capability. https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-app-service- introduction#dangling-dns-detection
Topics
Community Discussion
No community discussion yet for this question.