SC-100 · Question #49
Your company plans to deploy several Azure App Service web apps. The web apps will be deployed to the West Europe Azure region. The web apps will be accessed only by customers in Europe and the…
The correct answer is B. Azure Application Gateway Web Application Firewall (WAF). Azure Application Gateway Web Application Firewall (WAF) is the correct choice. WAF operates at Layer 7 (HTTP/HTTPS) and includes built-in bot protection rules specifically designed to detect and block malicious scanners and crawlers targeting web applications. It integrates…
Question
Your company plans to deploy several Azure App Service web apps. The web apps will be deployed to the West Europe Azure region. The web apps will be accessed only by customers in Europe and the United States. You need to recommend a solution to prevent malicious bots from scanning the web apps for vulnerabilities. The solution must minimize the attach surface. What should you include in the recommendation?
Options
- AAzure Firewall Premium
- BAzure Application Gateway Web Application Firewall (WAF)
- Cnetwork security groups (NSGs)
- DAzure Traffic Manager and application security groups
How the community answered
(30 responses)- A10% (3)
- B83% (25)
- C3% (1)
- D3% (1)
Explanation
Azure Application Gateway Web Application Firewall (WAF) is the correct choice. WAF operates at Layer 7 (HTTP/HTTPS) and includes built-in bot protection rules specifically designed to detect and block malicious scanners and crawlers targeting web applications. It integrates directly with Azure App Service, minimizing attack surface without requiring additional network hops. Azure Firewall Premium (A) is a network-level firewall better suited for general traffic filtering, not web app bot protection. NSGs (C) operate at Layer 3/4 and cannot inspect HTTP traffic for bot patterns. Azure Traffic Manager (D) is a DNS-based load balancer with no security inspection capability, and application security groups only organize VM NIC rules-neither addresses bot scanning.
Topics
Community Discussion
No community discussion yet for this question.