Home › Azure AZ-500 › cloudcomputing › az500networking › Which Azure global edge service should a securit…
Which Azure global edge service should a security engineer use to protect a globally-distributed web app with WAF, anycast routing, SSL offload, and DDoS protection?
AAzure Bastion
BAzure Cache for Redis
CAzure DNS round-robin
DAzure Front Door (Premium tier with WAF + DDoS Protection)
Answer & Solution
Correct answer: D. Azure Front Door (Premium tier with WAF + DDoS Protection)
Front Door Premium + WAF + DDoS Protection is Azure's global L7 edge stack (per AZ-500 §2 public access). The others aren't global L7 edge.
Related questions
Which Azure Virtual Network feature should a security engineer use to define custom routinWhich Azure tool should a security engineer use to capture and analyse VNet traffic flows Which Microsoft Defender for Cloud feature lets a security engineer OPEN management ports Which Azure service lets a security engineer SSH or RDP into a VM through the Azure portalWhich Azure networking feature should a security engineer use to give an Azure storage accWhich Azure networking feature should a security engineer use to give a VM-hosted workloadWhich Azure DDoS protection tier should a security engineer recommend for an internet-faciWhich Azure service is the canonical L7 application gateway with built-in Web Application