SC-100 Certification Practice Question #247

Question

You have an Azure subscription that contains three Azure App Service web apps.

You need to secure the apps by using Azure Web Application Firewall (WAF) on Azure Front Door. The solution must meet the following requirements:

•	Block attempts to access the apps from malicious bots.
•	Rate limit incoming connections to the apps.

The solution must minimize administrative effort.

What should you configure for each requirement? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Accepted Answer

MS Learn states unambiguously that rate limiting on Azure Front Door WAF is implemented through custom rules (rate limit rules) and "must be configured manually on the WAF using custom rules," while blocking malicious bots is the purpose of the Azure-managed bot protection managed rule set, which categorizes bots as bad/good/unknown and is updated dynamically with minimal admin effort. The "exclusion list" option is a distractor used to reduce false positives in managed rules, so it fits neither requirement. The lone community comment (4 👍) agrees exactly, and the "minimize administrative effort" constraint reinforces the Azure-managed rule set for bots.

More SC-100 practice questions