SC-100 Certification Practice Question #211

Question

You have a hybrid cloud infrastructure.

You plan to deploy the Azure applications shown in the following table.

What should you use to meet the requirement of each app? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Accepted Answer

App1's requirement is explicitly "protect against attacks that use cross-site scripting (XSS)" — Microsoft's Application Gateway WAF (OWASP/DRS ruleset) has a dedicated APPLICATION-ATTACK-XSS rule group and is the documented control for XSS on a web app, so the App1 dropdown resolves to Azure Application Gateway WAF policies. App2's requirement is to let consumers authenticate with their LinkedIn account (bring-your-own-identity); Azure AD B2C federates external/social identity providers such as LinkedIn through user flows or custom policies, and B2C custom policies (the only B2C option offered) is the consumer-identity choice — B2B is for inviting external organizations' users as guests, not consumer social sign-in. Three concurring high-vote comments and two MS Learn pages agree, with no dissent.

More SC-100 practice questions