sc-900 Practice Question 1785
Exam: sc-900
Domain: Describe the capabilities of Microsoft security solutions
Topic: Describe core infrastructure security capabilities in Azure
Difficulty: medium
Contoso Ltd is experiencing frequent DDoS attacks that affect their web application hosted on Azure. They want to implement Azure DDoS Protection to mitigate these attacks. Which of the following actions should they take to ensure the protection is effective and cost-efficient? Assume the web app is behind an Azure Front Door (AFD) and the company has a limited budget.
Answer Options
A
Deploy separate DDoS protection appliances in front of the web app.
B
Enable DDoS protection on the Azure Front Door (AFD) that hosts the web app.
C
Configure custom DDoS protection rules in Azure Security Center.
D
Use Azure Firewall to block all incoming traffic to the web app.
Correct Answer
B: Enable DDoS protection on the Azure Front Door (AFD) that hosts the web app.
Explanation
Azure DDoS Protection with Azure Front Door (AFD) can provide a cost-effective solution by leveraging the built-in DDoS protection features of AFD. The correct answer is B because it ensures that the DDoS protection is applied at the edge of the network, which is where the majority of DDoS attacks originate. Option A is incorrect because it does not leverage the integrated DDoS protection of AFD. Option C is incorrect as it introduces additional costs without providing any DDoS protection. Option D is incorrect as it does not use the integrated protection of AFD and may not be as cost-effective.