Microsoft Cybersecurity Architect (SC-100)Design security for infrastructureMedium

A global e-commerce company is migrating its public-facing web applications to Azure. These applications experience frequent DDoS attacks and require advanced web application firewall (WAF) capabilities, including custom rules, bot protection, and geo-filtering, to protect against common web vulnerabilities. They also need global traffic routing with SSL/TLS termination at the edge to improve performance and security. Which Azure service combination should the architect recommend?

  1. AAzure Application Gateway with WAF V2 and Azure Traffic Manager
  2. BAzure CDN with Azure Bastion
  3. CAzure Load Balancer with Azure Firewall Premium
  4. DAzure Front Door Premium with WAF
Show answer & explanation

Correct answer: D. Azure Front Door Premium with WAF

Azure Front Door Premium with WAF offers global traffic routing, SSL/TLS termination at the edge, and robust WAF capabilities including custom rules, bot protection, and geo-filtering. This combination directly addresses all the specified requirements for performance, security, and advanced WAF features for public-facing global applications.

Why the other options are wrong

  • A. Application Gateway WAF is regional, not global, and Traffic Manager is DNS-based, not a reverse proxy with WAF at the edge.
  • B. Azure CDN caches content but doesn't provide WAF or advanced traffic routing, and Azure Bastion is for secure VM access, not public-facing applications.
  • C. Azure Load Balancer is a Layer 4 service without WAF capabilities, and Azure Firewall is a network firewall, not a web application firewall.

Azure Front Door Premium with WAF

A scalable, global, and secure entry point for fast delivery of web applications with integrated WAF capabilities.

  • Provides global load balancing and site acceleration.
  • Offers SSL/TLS termination at the edge for improved performance and security.
  • Integrated Web Application Firewall (WAF) for DDoS protection and common web vulnerabilities.

Memory trick: Front Door is the GLOBAL guard and speed booster for your web apps.

More Design security for infrastructure questions