Exam SC-100 All Questions

View all questions & answers for the SC-100 exam

Exam SC-100 topic 2 question 22 discussion

Actual exam question from Microsoft's SC-100

Question #: 22
Topic #: 2

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your on-premises network contains an e-commerce web app that was developed in Angular and Node,js. The web app uses a MongoDB database.
You plan to migrate the web app to Azure. The solution architecture team proposes the following architecture as an Azure landing zone.

You need to provide recommendations to secure the connection between the web app and the database. The solution must follow the Zero Trust model.
Solution: You recommend implementing Azure Application Gateway with Azure Web Application Firewall (WAF).
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️

by Alex_Burlachenko at Aug. 30, 2022, 6:59 p.m.

Comments

Submit Cancel

HardcodedCloud

Highly Voted 2 years, 9 months ago

Selected Answer: B

When using Azure-provided PaaS services (e.g., Azure Storage, Azure Cosmos DB, or Azure Web App, use the PrivateLink connectivity option to ensure all data exchanges are over the private IP space and the traffic never leaves the Microsoft network.

upvoted 7 times

...

Alex_Burlachenko

Highly Voted 2 years, 9 months ago

correct answer

upvoted 5 times

...

whh13

Most Recent 6 months ago

Selected Answer: B

WAF is for external protection, not for backend comm with DB.

upvoted 2 times

...

SFAY

1 year, 3 months ago

Selected Answer: A

The answer is YES. In the explicit guidance provided by Microsoft, deploying WAF is a Network Security control for securing web workloads. Also, WAF is a feature of Web Application Gateway. Source: https://learn.microsoft.com/en-us/training/modules/specify-requirements-securing-saas-paas-iaas-services/3-specify-security-requirements-web-workloads

upvoted 2 times

SFAY

1 year, 3 months ago

Correction: Although the above statement is true, however the question is about securing connection BETWEEN the web app and the database and for that a private endpoint is the right solution. WAF only protects the web app. Therefore, the correct answer is 'No'

upvoted 1 times

...

Murtuza

1 year, 5 months ago

This is a tricky question MS threw the word client connection to confuse us in picking the WAF component and App Gateway which is irrelevant here

upvoted 2 times

...

Victory007

1 year, 10 months ago

Selected Answer: A

Yes, implementing Azure Application Gateway with Azure Web Application Firewall (WAF) can help meet the goal of securing the connection between the web app and the database following the Zero Trust model. Azure Application Gateway is a load balancer that provides application-level routing and load balancing services. It can be configured with the optional addition of Azure Web Application Firewall (WAF), which provides inspection of HTTP requests and prevents malicious attacks at the web layer, such as SQL Injection or Cross-Site Scripting. https://learn.microsoft.com/en-us/azure/architecture/example-scenario/gateway/firewall-application-gateway

upvoted 2 times

devop23

2 months, 1 week ago

can you people stop with the AI garbage and actually try to think the question?

upvoted 1 times

...

tester18128075

2 years, 8 months ago

Answer is no, App gateway does not provide connectivity between webapp and cosmos DB

upvoted 2 times

ServerBrain

1 year, 9 months ago

Correct. WAF will give you connectivity between the client and the App.

upvoted 1 times

...