You have a web app named WebApp1 and a web application firewall policy named WAF1. What should you deploy first to protect WebApp1 with the WAF policy?

To protect WebApp1 with WAF1, you must deploy an Azure Front Door. Azure Front Door is a global, scalable entry point that uses the Microsoft global edge network to create fast, secure, and highly scalable web applications. It integrates directly with Azure WAF policies, allowing you to apply WAF1 to traffic before it reaches WebApp1. Adding an extension to WebApp1 is incorrect because extensions typically add functionality within the web app itself, not external WAF protection. Deploying Azure Firewall is also incorrect in this context. While Azure Firewall provides network-level protection, Azure Front Door with WAF is specifically designed for application-layer protection of web applications and is the correct service for integrating WAF policies like WAF1.