Azure Security Assessment for Web Apps and Functions

Assessing the Security of Your Azure Web Apps and Functions

Question

You have an application that consists of several Azure App Service web apps and Azure functions.

You need to assess the security of the web apps and the functions.

Which Azure feature can you use to provide a recommendation for the security of the application?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

D

Monitor compute and app services: Compute & apps include the App Services tab, which App services: list of your App service environments and current security state of each.

Recommendations -

This section has a set of recommendations for each VM and computer, web and worker roles, Azure App Service Web Apps, and Azure App Service Environment that Security Center monitors. The first column lists the recommendation. The second column shows the total number of resources that are affected by that recommendation. The third column shows the severity of the issue.

Incorrect Answers:

C: Smart Detection automatically warns you of potential performance problems, not security problems in your web application.

https://docs.microsoft.com/en-us/azure/azure-monitor/app/proactive-diagnostics

The correct answer to this question is D. Compute & apps in Azure Security Center.

Azure Security Center is a cloud security solution that helps to prevent, detect, and respond to security threats in Azure resources. The Compute & apps feature within Azure Security Center provides a central location to view and manage the security of Azure virtual machines, virtual machine scale sets, and Azure App Service. It also provides recommendations on how to improve the security posture of your resources.

In this scenario, the application consists of several Azure App Service web apps and Azure functions. By using the Compute & apps feature in Azure Security Center, you can assess the security of the web apps and functions and receive recommendations on how to improve the security posture of these resources. The recommendations can include implementing network security groups, enabling Azure Active Directory authentication, and enabling web application firewall.

Option A, Security & Compliance in Azure Log Analytics, is used to monitor and audit the security and compliance of Azure resources. It provides recommendations for improving security and compliance but does not provide specific recommendations for Azure App Service and Azure functions.

Option B, Resource health in Azure Service Health, provides information on the health and availability of Azure services and resources. It does not provide security recommendations.

Option C, Smart Detection in Azure Application Insights, provides insights into application performance and identifies potential issues. It does not provide specific security recommendations.

Therefore, the correct answer is D. Compute & apps in Azure Security Center.