MENU
You are designing a security strategy for providing access to Azure App Service web apps through an Azure Front Door instance. You need to recommend a solution to ensure that the web apps only allow access through the Front Door instance.
Solution: You recommend access restrictions based on HTTP headers that have the Front Door ID.
Does this meet the goal?
Suggested Answer: A
Get Premium SC-100 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
DI
Diane
11 months ago
Wait, can headers really be trusted that much?
MI
Miesha
11 months ago
Not sure if that's enough protection, honestly.
BE
Bettyann
11 months ago
Definitely a yes! Front Door ID is key.
SH
Sherron
11 months ago
I think it could work, but what about spoofing?
MI
Miles
12 months ago
That sounds like a solid plan!
LO
Lonna
12 months ago
I’m leaning towards "No" because I recall that Azure Front Door has specific features for securing access that might be more effective.
TA
Tamar
1 year ago
I feel like relying solely on HTTP headers might not be enough. What if someone spoofed the header?
RO
Rolf
1 year ago
I remember a practice question where we had to restrict access to a web app, and I think we used IP filtering instead.
KR
Kristeen
1 year ago
I think using HTTP headers for access restrictions could work, but I'm not entirely sure if it's foolproof.
SU
Susana
1 year ago
I'm a bit confused by this question. I'll need to think through the implications of the DSCI Certified Lead Assessor not being an employee of an Accredited Organization.
MU
Murray
1 year ago
Yeah, I practiced a question like this before, and I think the answer was that alerts should still come through.
GR
Gracia
1 year ago
I'm leaning towards option C, enabling single sign-on (SSO) from Azure AD Connect. That seems like the most direct way to address the issue of users having to manually enter their passwords when accessing Microsoft 365 apps.