https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/SC-100/page_66_img_1.jpg

App1: The requirement is to protect a web application from cross-site scripting (XSS). Azure Application Gateway's Web Application Firewall (WAF) is specifically designed for this purpose. It operates at the application layer (Layer 7) and uses rules, often from the Open Web Application Security Project (OWASP) Core Rule Set, to inspect inbound web traffic and block malicious requests like XSS and SQL injection. Azure Firewall, in contrast, is a network firewall operating at Layers 3 and 4 and does not provide this level of application-specific protection.

App2: The requirement is to allow users to authenticate with their LinkedIn account. Azure Active Directory B2C (Azure AD B2C) is a customer identity and access management (CIAM) service designed for consumer-facing applications. It natively supports federation with social identity providers, including LinkedIn, allowing users to sign on with their existing social accounts. Azure AD B2B is intended for collaboration with external partners from other organizations, not for social identity integration for consumers.

Microsoft Azure Documentation, "What is Azure Web Application Firewall on Azure Application Gateway?". "Azure Web Application Firewall (WAF) on Azure Application Gateway provides centralized protection of your web applications from common exploits and vulnerabilities. Web applications are increasingly targeted by malicious attacks that exploit common known vulnerabilities, such as SQL injection and cross-site scripting."

Microsoft Azure Documentation, "Web Application Firewall CRS rule groups and rules". The rule group REQUEST-941-APPLICATION-ATTACK-XSS is specifically listed for protection against Cross-Site Scripting.

Microsoft Azure Documentation, "What is Azure Active Directory B2C?". "Azure Active Directory B2C (Azure AD B2C) is a customer identity access management (CIAM) solution... Your customers can use their preferred social, enterprise, or local account identities to get single sign-on access to your applications and APIs."

Microsoft Azure Documentation, "Set up sign-up and sign-in with a LinkedIn account using Azure Active Directory B2C". This document provides a step-by-step guide on how "To enable sign-in for users with a LinkedIn account in Azure Active Directory B2C (Azure AD B2C), you need to create an application in LinkedIn Developer portal." This confirms B2C as the correct service.