Microsoft Azure Fundamentals (AZ-900)Describe Azure identity, security, and networkingMedium
An organization is deploying several web applications to Azure and needs to ensure that these applications are protected from common web-based attacks, such as SQL injection and cross-site scripting. They also require load balancing capabilities for their web traffic. Which Azure networking service combines these features?
- AAzure Traffic Manager
- BAzure Load Balancer
- CAzure Virtual Network
- DAzure Application Gateway with WAF
Show answer & explanationAnswer & explanation
Correct answer: D. Azure Application Gateway with WAF
Azure Application Gateway is a web traffic load balancer that includes a Web Application Firewall (WAF) to protect web applications from common web vulnerabilities. It routes traffic based on URL path or host headers.
Why the other options are wrong
- A. Azure Traffic Manager is a DNS-based traffic load balancer that distributes traffic globally, but lacks WAF capabilities.
- B. Azure Load Balancer distributes network traffic at layer 4 (TCP/UDP) and does not provide WAF capabilities.
- C. Azure Virtual Network provides network connectivity for Azure resources but does not offer load balancing or WAF features directly.
Azure Application Gateway with WAF
A web traffic load balancer that provides a Web Application Firewall (WAF) to protect web applications from common exploits.
- Operates at Layer 7 (HTTP/HTTPS).
- Includes WAF for protection against common web attacks.
- Supports URL-based routing and SSL termination.
Memory trick: App Gateway is the 'smart bouncer' for 'web traffic', with a 'security guard'.