AZ104-Q: protect a regional HTTP application
A public web application needs layer-7 routing and managed web-attack protection in one region. Which service combination best fits?
- A) Azure Load Balancer without a probe.
- B) Application Gateway with Web Application Firewall. ✓
- C) A storage account firewall only.
- D) Azure Bastion. Answer: B. Application Gateway operates at HTTP(S) layer 7 and can use WAF policies. Why not the others: Load Balancer is layer 4; storage firewall and Bastion do not front a web application.