Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Cybersecurity Architect Expert · Microsoft
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
WAF is for external protection, not for backend comm with DB.
The answer is YES. In the explicit guidance provided by Microsoft, deploying WAF is a Network Security control for securing web workloads. Also, WAF is a feature of Web Application Gateway. Source: https://learn.microsoft.com/en-us/training/modules/specify-requirements-securing-saas-paas-iaas-services/3-specify-security-requirements-web-workloads
Correction: Although the above statement is true, however the question is about securing connection BETWEEN the web app and the database and for that a private endpoint is the right solution. WAF only protects the web app. Therefore, the correct answer is 'No'