AZ-700 Question 212
Select 3Contoso is building a globally distributed e-commerce site with the following requirements: (1) Requests should be routed to the nearest back-end to minimize latency, (2) Traffic should be secured against common web exploits like SQL injection, and (3) Access from certain geographic regions must be restricted. You plan to use Azure Front Door as the front-end solution. Which Azure Front Door features should you configure to meet these requirements? (Choose three.)
- A
Use Azure Front Door's global anycast technology to route user requests to the nearest back-end.
- B
Configure a WAF policy with custom rules in Azure Front Door to block SQL injection attempts.
- C
Enable geo-filtering by using IP-based rules to block or allow traffic from specific regions at the WAF level.
- D
Perform crash-consistent backups from the Azure portal to ensure data resiliency for user sessions.
- E
Deploy a third-party firewall solution in the same virtual network as the origin to filter specific IP addresses.
Show answer and explanation
Correct answers: A, B, C
Explanation
Azure Front Door provides global load balancing via anycast technology, ensuring requests are routed to the closest healthy back-end. Its WAF capability enables customizable rules to prevent SQL injection and other web exploits. Additionally, geo-filtering within WAF lets you restrict or allow traffic based on user location. These features collectively address the scenario� requirements. For further details, consult the Azure Front Door documentation at https://docs.microsoft.com/azure/frontdoor.
- A. Correct.
Correct. Azure Front Door uses a global anycast network that routes user requests to the nearest available back-end, minimizing latency and improving performance for globally distributed applications.
- B. Correct.
Correct. Azure Front Door� Web Application Firewall (WAF) supports custom rules and managed rule sets to protect against common exploits such as SQL injection, cross-site scripting, and more.
- C. Correct.
Correct. Azure Front Door WAF allows you to add geo-filtering rules based on a client's IP geolocation, making it possible to allow or deny traffic from specific countries or regions.
- D. Incorrect.
Incorrect. Crash-consistent backups relate to data protection strategies for VMs and storage, not to routing or filtering traffic at the edge. This does not address the requirements listed.
- E. Incorrect.
Incorrect. While a third-party firewall can add protection at the origin, it does not leverage native Azure Front Door capabilities for global routing, reducing latency, or geo-filtering at the edge.