SC-100 Certification Practice Question #144

Question

Your company plans to deploy several Azure App Service web apps. The web apps will be deployed to the West Europe Azure region. The web apps will be accessed only by customers in Europe and the United States.
You need to recommend a solution to prevent malicious bots from scanning the web apps for vulnerabilities. The solution must minimize the attack surface.
What should you include in the recommendation?

Accepted Answer

The goal is to stop malicious bots from scanning web apps for vulnerabilities while minimizing the attack surface. Azure Application Gateway WAF directly addresses this: its managed Bot Manager / bot protection rule set categorizes traffic as good, bad, or unknown and blocks bad bots (sourced from the Microsoft Threat Intelligence feed) before they reach the backend, and its geomatch custom rules can restrict access to just Europe and the United States to further minimize the surface — a regional fit since the apps live in a single region (West Europe). The Suggested Answer, the unanimous Most Voted (63), and two highly-voted comments all converge with the documentation, with no credible dissenting letter, so confidence is high.

More SC-100 practice questions