A global HTTP application must use edge caching and managed WAF rules, connect to supported private origins, and prevent direct public origin bypass. Which two choices fit? Select 2 answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

A.Keep every origin publicly unrestricted because edge WAF then protects all possible paths
B.Use Front Door Standard and assume managed WAF rules and Private Link match Premium
C.Restrict origins so callers cannot bypass the intended global entry policy
D.Use a supported Front Door Premium Private Link origin configuration
E.Use Traffic Manager as the HTTP caching proxy

Show the answer and explanation

✓ Correct answers

Restrict origins so callers cannot bypass the intended global entry policy
Use a supported Front Door Premium Private Link origin configuration

Front Door Premium supports private origin connectivity and managed WAF rules, while origin restriction preserves the intended security entry. Standard does not have these Premium capabilities, Traffic Manager does not proxy or cache HTTP, and unrestricted origins can bypass edge policy. Source guide: PDF page(s) 59-60.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.