SC-100 Practice Question 3996
Exam: SC-100
Domain: Design security solutions for infrastructure
Difficulty: medium
When designing DNS security in Azure, how can you protect Azure VMs from resolving known malicious command-and-control (C2) domain names?
Answer Options
A
Azure Firewall DNS Proxy with Threat Intelligence filtering
B
Editing the local hosts file on every client laptop manually
C
Disabling DNS resolution completely across the virtual network
D
Using unencrypted public consumer DNS resolvers
Correct Answer
A: Azure Firewall DNS Proxy with Threat Intelligence filtering
Explanation
Configure Azure Firewall DNS Proxy integrated with Threat Intelligence filtering to inspect and block DNS resolution requests destined for known malicious domains.