sc-900 Practice Question 1789
Exam: sc-900
Domain: Describe the capabilities of Microsoft security solutions
Topic: Describe core infrastructure security capabilities in Azure
Difficulty: medium
Contoso Ltd is experiencing performance issues with their web application hosted on Azure App Service. They suspect that the issue might be due to DDoS attacks. They decide to use Azure DDoS Protection to mitigate the attacks. However, they are concerned about the impact on their application performance. Which of the following actions should they take to ensure that the DDoS protection does not significantly degrade the application performance?
Answer Options
A
Disable Azure DDoS Protection to avoid any performance degradation.
B
Configure Azure DDoS Protection with a lower threshold for blocking requests and monitor the application performance to ensure it remains within acceptable limits.
C
Use the default settings for Azure DDoS Protection and hope that the performance issues resolve themselves.
D
Increase the threshold for blocking requests to a very high level to ensure no performance degradation.
Correct Answer
B: Configure Azure DDoS Protection with a lower threshold for blocking requests and monitor the application performance to ensure it remains within acceptable limits.
Explanation
The correct answer is B because it provides a balanced approach to mitigate DDoS attacks without significantly degrading application performance. Option A is incorrect as it disables DDoS protection entirely, leaving the application vulnerable to attacks. Option C is incorrect as it uses the default settings, which may not be optimized for performance. Option D is incorrect as it does not provide a specific configuration for balancing protection and performance.