A web workload needs regional HTTP attack filtering and centralized inspected egress for non-HTTP workloads. Which two controls fit their respective roles? Select 2 answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

A.An NSG alone to inspect every HTTP request body
B.Azure Firewall or a suitable NVA for centralized network/application egress inspection
C.NAT Gateway as a full intrusion-detection firewall
D.A WAF on a supported HTTP frontend for application-layer web attacks
E.A WAF as a universal UDP inspection device

Show the answer and explanation

✓ Correct answers

Azure Firewall or a suitable NVA for centralized network/application egress inspection
A WAF on a supported HTTP frontend for application-layer web attacks

WAF inspects supported HTTP requests, while Firewall/NVA handles centralized network and application traffic policies. NSGs filter network attributes rather than HTTP bodies, NAT performs outbound translation rather than full inspection, and WAF does not provide universal UDP security. Source guide: PDF page(s) 59.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.