AZ-700 Azure Application Gateway and WAF 3

Question 1

What are the two operating modes available for Azure WAF on Application Gateway?

Accepted Answer

Detection mode and Prevention mode

Answer

Active mode and Passive mode

Answer

Monitor mode and Block mode

Answer

Learning mode and Enforcement mode

Question 2

Which category of attacks does Azure WAF on Application Gateway primarily protect against?

Accepted Answer

SQL injection, cross-site scripting, and OWASP Top 10 vulnerabilities

Answer

DDoS volumetric and bandwidth exhaustion attacks

Answer

Network-level port scanning and IP spoofing

Answer

BGP route hijacking and DNS amplification attacks

Question 3

What is the purpose of WAF exclusion lists in Azure Application Gateway?

Accepted Answer

Excluding specific request attributes from WAF rule evaluation to prevent false positives

Answer

Blocking specific IP address ranges from accessing the application

Answer

Creating custom WAF rules for unique application traffic patterns

Answer

Disabling WAF inspection for specific backend pool members

Question 4

How are WAF custom rules evaluated relative to managed ruleset rules in Azure Application Gateway?

Accepted Answer

Custom rules are evaluated before managed ruleset rules and take priority

Answer

Custom rules are evaluated after all managed ruleset rules

Answer

Custom rules and managed rules are evaluated in parallel simultaneously

Answer

Custom rules only apply when managed rules are disabled

Question 5

Which HTTP response code does Azure WAF return to clients when it blocks a request in Prevention mode?

Accepted Answer

403 Forbidden

Answer

400 Bad Request

Answer

401 Unauthorized

Answer

404 Not Found

Question 6

What is a managed ruleset in Azure WAF?

Accepted Answer

A pre-configured set of rules maintained by Microsoft protecting against known web vulnerabilities

Answer

A set of rules created and fully managed by the application owner

Answer

Rules imported from third-party security marketplace solutions

Answer

Automatically generated rules based on machine learning traffic analysis

Question 7

Which WAF policy association scope allows different WAF configurations to be applied to individual listeners on the same Application Gateway?

Accepted Answer

Per-site (per-listener) WAF policy

Answer

Global WAF policy applied to the entire gateway

Answer

Per-URI WAF policy scoped to URL paths

Answer

Backend pool WAF policy scoped to target servers