Microsoft Cybersecurity Architect (SC-100)Design security for infrastructureMedium
A global e-commerce company is migrating its public-facing web applications to Azure. These applications experience frequent DDoS attacks and require advanced web application firewall (WAF) capabilities, including custom rules, bot protection, and geo-filtering, to protect against common web vulnerabilities. They also need global traffic routing with SSL/TLS termination at the edge to improve performance and security. Which Azure service combination should the architect recommend?
- AAzure Application Gateway with WAF V2 and Azure Traffic Manager
- BAzure CDN with Azure Bastion
- CAzure Load Balancer with Azure Firewall Premium
- DAzure Front Door Premium with WAF
Show answer & explanationAnswer & explanation
Correct answer: D. Azure Front Door Premium with WAF
Azure Front Door Premium with WAF offers global traffic routing, SSL/TLS termination at the edge, and robust WAF capabilities including custom rules, bot protection, and geo-filtering. This combination directly addresses all the specified requirements for performance, security, and advanced WAF features for public-facing global applications.
Why the other options are wrong
- A. Application Gateway WAF is regional, not global, and Traffic Manager is DNS-based, not a reverse proxy with WAF at the edge.
- B. Azure CDN caches content but doesn't provide WAF or advanced traffic routing, and Azure Bastion is for secure VM access, not public-facing applications.
- C. Azure Load Balancer is a Layer 4 service without WAF capabilities, and Azure Firewall is a network firewall, not a web application firewall.
Azure Front Door Premium with WAF
A scalable, global, and secure entry point for fast delivery of web applications with integrated WAF capabilities.
- Provides global load balancing and site acceleration.
- Offers SSL/TLS termination at the edge for improved performance and security.
- Integrated Web Application Firewall (WAF) for DDoS protection and common web vulnerabilities.
Memory trick: Front Door is the GLOBAL guard and speed booster for your web apps.