AZ-700 Azure Application Gateway and WAF 1 — Questions and Answers
Question 1: At which OSI layer does Azure Application Gateway primarily operate?
- Layer 4 (Transport)
- Layer 7 (Application) (Correct answer)
- Layer 3 (Network)
- Layer 5 (Session)
Correct answer: Layer 7 (Application)
Application Gateway operates at Layer 7, enabling routing decisions based on HTTP/HTTPS attributes such as URLs, headers, and cookies.
Question 2: Which Application Gateway component is responsible for accepting incoming client connections on a specified protocol and port?
- Backend pool
- Routing rule
- Listener (Correct answer)
- Health probe
Correct answer: Listener
A listener checks for incoming connection requests based on protocol, port, host name, and IP address combination.
Question 3: Which Application Gateway routing rule type allows you to direct requests with '/images/*' to one backend pool and '/video/*' to another?
- Basic routing
- Path-based routing (Correct answer)
- Priority routing
- Affinity-based routing
Correct answer: Path-based routing
Path-based routing rules direct traffic to different backend pools based on the URL path segment in the HTTP request.
Question 4: Which Azure Application Gateway SKU supports autoscaling and zone redundancy?
- Standard v1
- WAF v1
- Standard v2 (Correct answer)
- Basic
Correct answer: Standard v2
Application Gateway v2 SKUs (Standard v2 and WAF v2) support autoscaling, zone redundancy, and static virtual IP addresses.
Question 5: Which Application Gateway feature ensures that requests from the same client session are always directed to the same backend server?
- Connection draining
- Cookie-based session affinity (Correct answer)
- Custom health probes
- URL rewrite rules
Correct answer: Cookie-based session affinity
Cookie-based session affinity uses a gateway-managed cookie to route requests from the same client session to the same backend server.
Question 6: What is the purpose of connection draining in Azure Application Gateway?
- Removing unhealthy backend instances immediately from the pool
- Allowing existing in-flight requests to complete before a backend member is removed (Correct answer)
- Terminating SSL/TLS connections at the gateway
- Monitoring backend pool member health continuously
Correct answer: Allowing existing in-flight requests to complete before a backend member is removed
Connection draining allows active requests to complete within a configured timeout period when a backend member is deregistered or removed from the pool.
Question 7: Which protocol does Application Gateway use for backend health probes when no custom probe is configured?
- ICMP
- TCP
- HTTP (Correct answer)
- HTTPS
Correct answer: HTTP
When no custom probe is defined, Application Gateway uses a default HTTP health probe to check backend pool member availability.
AZ-700 Azure Application Gateway and WAF 1
At which OSI layer does Azure Application Gateway primarily operate?