Topic 1 · Question 248

You need to configure an Azure solution that meets the following requirements:
✑ Secures websites from attacks
✑ Generates reports that contain details of attempted attacks
What should you include in the solution?

A. Azure Firewall

B. a network security group (NSG)

C. Azure Information Protection

D. DDoS protection

Top comment

Community votes:D · 2 (67%)A · 1 (33%)

Jay_azure▲ 190Highly votedApril 11, 2021 09:57 am

Attack is the Key word for DDOS.
Rules is keyword for Firewall.
Allow/Deny is the Keyword for NSG

5 more highly voted comments

Ragijo▲ 96Highly votedMay 17, 2020 04:46 pm

Azure Firewall doesn't protect from attacks, only filter traffic at layer 3 and layer 7, so DDoS is the correct answer.

Mozbius_▲ 35Highly votedMay 22, 2022 03:33 am

Firewall and NSG BOTH Allow/Deny. The difference between them is (mainly among other things) :
FIREWALL = acts as a defence in depth PERIMETER (OUTSIDE the virtual network) filter = between a virtual network and the outside world
NSG : acts as a defence in depth NETWORK/SUBNET (INSIDE/WITHIN the virtual network filter) = at the resources level

Please correct me if I am wrong.
https://docs.microsoft.com/en-us/learn/modules/secure-network-connectivity-azure/

barchetta▲ 13Highly votedAugust 09, 2020 06:00 pm

Does ddos protect from a sql injection attack? Would you not call that an attack? Me thinks not. Another ambiguous MS question.

oncleled▲ 9Highly votedOctober 05, 2020 06:35 pm

https://docs.microsoft.com/en-us/azure/virtual-network/ddos-protection-overview
Resource (application) layer attacks: These attacks target web application packets, to disrupt the transmission of data between hosts. The attacks include HTTP protocol violations, SQL injection, cross-site scripting, and other layer 7 attacks. Use a Web Application Firewall, such as the Azure Application Gateway web application firewall, as well as DDoS Protection Standard to provide defense against these attacks. There are also third-party web application firewall offerings available in the Azure Marketplace.

troublestarterx▲ 8Highly votedNovember 10, 2020 12:46 pm

Azure firewall dont protect against attacks

Open discussion on ExamTopics ↗