SC-100 Practice Question 3970
Exam: SC-100
Domain: Design security solutions for infrastructure
Difficulty: medium
You need to protect web-facing applications deployed in Azure against distributed denial-of-service (DDoS) volumetric and application-layer floods. What combination of services should you architect?
Answer Options
A
Azure DDoS Protection (Network Protection) and Azure WAF
B
Local Windows Firewall rules on VM instances only
C
Basic network security groups on subnet boundaries
D
Private DNS zones without firewall inspection
Correct Answer
A: Azure DDoS Protection (Network Protection) and Azure WAF
Explanation
Azure DDoS Protection (Network Protection) mitigates massive volumetric layer 3/4 flood attacks, while Azure Web Application Firewall (WAF) mitigates layer 7 OWASP attacks.