Microsoft Cybersecurity Architect (SC-100)Design security for infrastructureMedium
A healthcare organization is migrating its patient portal application to Azure. The application's web front end is exposed to the internet and requires protection against common web vulnerabilities, such as SQL injection, cross-site scripting (XSS), and bot attacks. Additionally, the organization needs to ensure high availability and global routing for optimal user experience. Which Azure service combination provides the most suitable solution?
- AAzure Application Gateway with Network Security Groups (NSGs)
- BAzure Front Door with Web Application Firewall (WAF)
- CAzure Load Balancer with Azure DDoS Protection Standard
- DAzure Traffic Manager with Azure Firewall
Show answer & explanationAnswer & explanation
Correct answer: B. Azure Front Door with Web Application Firewall (WAF)
Azure Front Door provides global routing and high availability for optimal user experience, while its integrated Web Application Firewall (WAF) protects web applications from common web vulnerabilities like SQL injection, XSS, and bot attacks, directly addressing the requirements for a public-facing web application.
Why the other options are wrong
- A. Application Gateway with NSGs provides WAF capabilities, but Front Door offers global routing and higher performance for geographically dispersed users.
- C. Load Balancer distributes traffic within a region, and DDoS protection mitigates DDoS attacks, but neither provides specific web application firewall capabilities.
- D. Traffic Manager provides DNS-based global traffic distribution, and Azure Firewall is a network firewall, neither offers WAF capabilities for web vulnerabilities.
Azure Front Door with WAF
Azure Front Door is a global, scalable entry-point that uses the Microsoft global edge network to create fast, secure, and widely scalable web applications. It integrates with a Web Application Firewall (WAF) to protect web applications from common web-based attacks.
- Global load balancing and site acceleration.
- Integrated Web Application Firewall (WAF).
- Protects against SQL injection, XSS, bot attacks.
- Provides high availability and optimal routing for web traffic.
Memory trick: Front Door for Global Web, WAF for Web Attacks, App Gateway for Regional.