SC-100 Practice Question 4010
Exam: SC-100
Domain: Design security solutions for applications and data
Difficulty: medium
An architect is designing security for an enterprise REST API gateway published to external customers. What combination of Azure services protects the APIs against DDoS attacks, brute force, and OWASP exploits?
Answer Options
A
Azure API Management protected by Azure Application Gateway WAF or Front Door WAF
B
Exposing API endpoints directly to the public internet without gateways
C
Basic internal load balancers with no WAF inspection
D
Disabling SSL encryption on external API traffic
Correct Answer
A: Azure API Management protected by Azure Application Gateway WAF or Front Door WAF
Explanation
Deploy Azure API Management protected by Azure Application Gateway with Web Application Firewall (WAF) or Azure Front Door WAF to inspect incoming API payloads.