Microsoft Cybersecurity Architect (SC-100)Design security for infrastructureHard
A global e-commerce company is migrating its public-facing web applications to Azure. These applications handle sensitive customer payment information and are frequently targeted by web-based attacks. The company requires a solution that provides advanced threat protection, content delivery network (CDN) capabilities, and centralized management for all its web applications globally, with minimal latency for users worldwide. Which Azure service should the architect recommend?
- AAzure CDN Standard
- BAzure Traffic Manager
- CAzure Application Gateway with WAF
- DAzure Front Door Premium with WAF
Show answer & explanationAnswer & explanation
Correct answer: D. Azure Front Door Premium with WAF
Azure Front Door Premium with WAF provides global load balancing, CDN capabilities, and advanced WAF protection at the edge, offering optimal performance, security, and centralized management for global public-facing applications handling sensitive data.
Why the other options are wrong
- A. Azure CDN Standard provides content delivery but lacks WAF capabilities and advanced global traffic management for application security.
- B. Traffic Manager provides DNS-based global load balancing but lacks WAF, CDN, and advanced security features.
- C. Application Gateway is regional and focuses on Layer 7 load balancing within a single region, lacking global CDN and advanced DDoS/bot protection at the edge.
Azure Front Door Premium with WAF
A global, scalable entry-point that uses the Microsoft global edge network to create fast, secure, and widely scalable web applications. It includes CDN, WAF, and advanced security features.
- Provides global load balancing and intelligent routing.
- Integrates Web Application Firewall (WAF) for advanced threat protection.
- Offers CDN capabilities for content caching and acceleration.
- Operates at the edge, reducing latency for global users.
Memory trick: Front Door is your global guard, fast and secure for all your web apps.