An internet-facing workload needs protection from network flooding and separate HTTP injection filtering. Which distinction is correct?

Choose the single best answer.

A.WAF replaces every TCP/UDP DDoS protection requirement
B.DDoS protection validates every user's application permissions
C.DDoS protection addresses flooding, while WAF addresses application-layer HTTP patterns
D.NSG service tags automatically remove all malicious HTTP bodies

Show the answer and explanation

✓ Correct answer

DDoS protection addresses flooding, while WAF addresses application-layer HTTP patterns

The controls operate on different attack classes and should be selected by traffic and supported scope. WAF is not universal network flood protection, DDoS mitigation is not application authorization, and service tags do not inspect malicious bodies. Source guide: PDF page(s) 59.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.