From the course: Microsoft Cybersecurity Architect (SC-100) Cert Prep by Microsoft Press

Unlock this course with a free trial

Join today to access over 25,500 courses taught by industry experts.

Specify security requirements for web workloads

Specify security requirements for web workloads

From the course: Microsoft Cybersecurity Architect (SC-100) Cert Prep by Microsoft Press

Start my 1-month free trial Buy for my team

Specify security requirements for web workloads

“

As we look at security requirements for Web workloads, one of the first things that we should do is ensure that we have secure access to web apps with HTTPS. When you create an app service, the default domain name is already accessible using HTTPS. If you can figure a custom domain for your application, you should also secure it with a TLS or SSL certificate so that client browsers can make secured HTTPS connections to the app service on your custom domain. You should also disable insecure protocols. To secure your app against all unencrypted or regular HTTP connections, app services allow you to configure to be enforced.

Contents