Microsoft Cybersecurity Architect (SC-100)Design security for infrastructureMedium
A multinational corporation is migrating its legacy applications to Azure. These applications still rely on traditional network-based security controls and require deep packet inspection, intrusion detection/prevention (IDPS), and URL filtering for internet-bound traffic. The security team needs a centralized solution that can scale globally and integrate with their existing security operations center (SOC) tools. Which Azure security service should be recommended?
- AAzure Front Door with Web Application Firewall (WAF)
- BAzure Firewall Premium
- CAzure Network Security Groups (NSGs)
- DAzure DDoS Protection Standard
Show answer & explanationAnswer & explanation
Correct answer: B. Azure Firewall Premium
Azure Firewall Premium offers advanced threat protection features like IDPS, URL filtering, and TLS inspection, providing deep packet inspection capabilities essential for legacy applications and meeting the requirement for centralized, scalable security with SOC integration.
Why the other options are wrong
- A. Azure Front Door with WAF protects web applications at the edge but doesn't provide network-level IDPS or URL filtering for general internet-bound traffic from VMs.
- C. NSGs provide basic Layer 4 traffic filtering and do not offer deep packet inspection, IDPS, or URL filtering.
- D. DDoS Protection Standard protects against denial-of-service attacks but does not provide advanced threat inspection or filtering capabilities.
Azure Firewall Premium
Azure Firewall Premium is a cloud-native, intelligent network firewall security service that provides advanced threat protection for your cloud workloads, offering deeper packet inspection, intrusion detection/prevention (IDPS), URL filtering, and TLS inspection capabilities.
- Advanced threat protection for network traffic.
- Features include IDPS, URL filtering, and TLS inspection.
- Centralized network security across virtual networks.
- Scalable and highly available.
Memory trick: Firewall Premium Inspects Deeply, WAF Protects Web, NSG Filters Basic.