sc-900 Practice Question 1787
Exam: sc-900
Domain: Describe the capabilities of Microsoft security solutions
Topic: Describe core infrastructure security capabilities in Azure
Difficulty: medium
Contoso Ltd's web application is facing multiple SQL injection attacks. They decide to use Azure Web Application Firewall (WAF) to protect against these attacks. Which of the following configurations would best help them achieve this goal while minimizing false positives?
Answer Options
A
Disable all WAF rules to avoid false positives.
B
Enable only the rules related to SQL injection attacks and set the threshold for blocking requests to a moderate level.
C
Enable all WAF rules and set the threshold for blocking requests to a very low level.
D
Enable all WAF rules and disable all rate limiting rules.
Correct Answer
B: Enable only the rules related to SQL injection attacks and set the threshold for blocking requests to a moderate level.
Explanation
The correct answer is B because it provides a balanced approach to minimize false positives while effectively blocking malicious traffic. Option A is incorrect as it disables all rules, which would leave the application vulnerable to attacks. Option C is incorrect as it enables too many rules, leading to a high number of false positives. Option D is incorrect as it does not provide a specific configuration for minimizing false positives.