AZ-700 Azure Application Gateway and WAF 3

Question 1

What are the two operating modes available for Azure WAF on Application Gateway?

Accepted Answer

Detection mode and Prevention mode

Answer

WAF operates in Detection mode (logs threats without blocking) or Prevention mode (logs and actively blocks malicious requests).

Question 2

Which category of attacks does Azure WAF on Application Gateway primarily protect against?

Accepted Answer

SQL injection, cross-site scripting, and OWASP Top 10 vulnerabilities

Answer

Azure WAF protects against common web application attacks including SQL injection, XSS, and other OWASP Top 10 threats using managed rule sets.

Question 3

What is the purpose of WAF exclusion lists in Azure Application Gateway?

Accepted Answer

Excluding specific request attributes from WAF rule evaluation to prevent false positives

Answer

WAF exclusion lists allow you to omit specific request attributes such as headers, cookies, or query strings from WAF rule evaluation to eliminate false positive blocks.

Question 4

How are WAF custom rules evaluated relative to managed ruleset rules in Azure Application Gateway?

Accepted Answer

Custom rules are evaluated before managed ruleset rules and take priority

Answer

WAF custom rules are evaluated before managed ruleset rules, allowing you to define precise allow or deny logic that takes priority over the default ruleset.

Question 5

Which HTTP response code does Azure WAF return to clients when it blocks a request in Prevention mode?

Accepted Answer

403 Forbidden

Answer

When WAF blocks a request in Prevention mode, it returns HTTP 403 Forbidden to the client, indicating the request was understood but refused.

AZ-700 - Designing and Implementing Microsoft Azure Networking Solutions Certification Practice Test

AZ-700 - Designing and Implementing Microsoft Azure Networking Solutions Certification Practice Test

AZ-700 Azure Application Gateway and WAF 3