Question

Your company deploys Azure Firewall to protect a hub virtual network. Security requirements now mandate that the firewall must decrypt outbound TLS traffic to inspect payloads for malware signatures and must actively block traffic matching known intrusion signatures. The current deployment uses the Standard SKU. What must you do to meet both requirements?

Accepted Answer

Upgrade the firewall to the Premium SKU and configure TLS inspection along with IDPS in alert-and-deny mode.

Answer

Keep the Standard SKU and enable threat intelligence in Alert and deny mode.

Answer

Keep the Standard SKU and add application rules with FQDN filtering plus web categories.

Answer

Upgrade the firewall to the Basic SKU and enable the DNS proxy feature.