Exam SC-100 topic 4 question 13 discussion

Actual exam question from Microsoft's SC-100

Question #: 13
Topic #: 4

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are designing a security strategy for providing access to Azure App Service web apps through an Azure Front Door instance.
You need to recommend a solution to ensure that the web apps only allow access through the Front Door instance.
Solution: You recommend configuring gateway-required virtual network integration.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️

by PlumpyTumbler at Sept. 2, 2022, 5:48 p.m.

Comments

Submit Cancel

Ramye

11 months ago

This is the repeat question - remember the answer would be that is tied with Header or Service Tag

upvoted 4 times

...

zellck

1 year, 6 months ago

Selected Answer: B

B is the answer. https://learn.microsoft.com/en-us/azure/app-service/overview-access-restrictions#restrict-access-to-a-specific-azure-front-door-instance Traffic from Azure Front Door to your application originates from a well known set of IP ranges defined in the AzureFrontDoor.Backend service tag. Using a service tag restriction rule, you can restrict traffic to only originate from Azure Front Door. To ensure traffic only originates from your specific instance, you need to further filter the incoming requests based on the unique http header that Azure Front Door sends called X-Azure-FDID. You can find the Front Door ID in the portal.

upvoted 1 times

...

InformationOverload

2 years, 3 months ago

Selected Answer: B

user service tags

upvoted 2 times

...

PlumpyTumbler

2 years, 3 months ago

Selected Answer: B

https://docs.microsoft.com/en-us/azure/app-service/app-service-ip-restrictions#restrict-access-to-a-specific-azure-front-door-instance

upvoted 3 times

...