What is the purpose of an Azure Firewall policy?

To define a set of rules that govern traffic filtering for one or more Azure Firewalls

To manage user permissions for accessing the firewall

To configure the firewall's physical hardware settings

To store encryption keys for securing firewall traffic

Which of the following is a key feature of Azure WAF?

Encryption of data at rest in the web server

Custom rules to allow or block traffic based on source IP addresses

Load balancing of traffic across multiple servers

Automatic patching of web application code

A company has a web application that experiences intermittent traffic spikes. They want to protect it from web attacks and also benefit from global distribution. They are considering Azure Front Door with WAF. What is a key benefit of this deployment?

It replaces the need for Azure DDoS Protection

It provides a VPN connection to the application

It automatically scales the application

Protection at the edge close to users, reducing latency and offloading attack traffic

What is the primary function of Azure Firewall?

To manage user identities and access to Azure resources

To filter network traffic between Azure resources and the internet

To provide a web application firewall for HTTP/HTTPS traffic

To encrypt data at rest in Azure storage accounts

A company has a global web application that is served through Azure Front Door. The security team wants to protect the application from DDoS attacks and web application attacks like SQL injection. They also want to block traffic from specific countries. What should they implement?

Enable Azure DDoS Protection on the origin and associate a WAF policy with Front Door that includes managed rules and a geo-filtering rule

Use Azure Firewall in front of Front Door to block SQL injection and geo-filter

Use NSGs on the Front Door to block traffic from specific countries

Enable Azure DDoS IP Protection on the Front Door

Microsoft Certified:Security, Compliance, and Identity Fundamentals

Domain 3Objective 1

Describe Core Infrastructure Security Services in Azure SC-900 Practice Questions (Page 5)

Part of the Describe the capabilities of Microsoft security solutions domain, which accounts for 35–40% of the SC-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~7–12 in this domain), expect 2–3 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

12concepts

35–40%of the exam

12 Concepts in This Objective

Azure DDoS Protection Overview
Azure DDoS Protection Tiers
Azure Firewall Functionality
Azure Firewall Policy Management
Azure Web Application Firewall (WAF) Features
Azure WAF Deployment
Azure Virtual Networks Segmentation
Network Security Groups (NSGs) Function
NSG Rule Configuration
Azure Bastion Service
Azure Key Vault Overview
Azure Key Vault Integration

Questions 21–25

21foundation · easy
What is the purpose of an Azure Firewall policy?
Select an answer first
22foundation · easy
Which of the following is a key feature of Azure WAF?
Select an answer first
23expert · hard
A company has a web application that experiences intermittent traffic spikes. They want to protect it from web attacks and also benefit from global distribution. They are considering Azure Front Door with WAF. What is a key benefit of this deployment?
Select an answer first
24foundation · easy
What is the primary function of Azure Firewall?
Select an answer first
25expert · hard
A company has a global web application that is served through Azure Front Door. The security team wants to protect the application from DDoS attacks and web application attacks like SQL injection. They also want to block traffic from specific countries. What should they implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-900” is a trademark of its owner, used for identification only.