Question

Your company runs a public e-commerce site behind Azure Front Door Premium. Security requires protection against the OWASP Top 10 and additional protection against known malicious bots and IP reputation-based threats using Microsoft-managed intelligence. You are configuring the WAF policy associated with the Front Door endpoint. Which managed rule set configuration meets these requirements with the least administrative effort?

Accepted Answer

Enable the Microsoft_DefaultRuleSet (DRS) plus the Microsoft_BotManagerRuleSet on the Front Door WAF policy

Answer

Enable only the OWASP CRS 3.2 rule set and manually create custom rules to block malicious IPs

Answer

Enable the Microsoft_DefaultRuleSet on an Application Gateway WAF policy and route Front Door traffic through it

Answer

Enable only the Microsoft_BotManagerRuleSet and rely on rate-limiting custom rules for OWASP coverage