AZ-800 Application Gateway and WAF 5

Question 1

An Application Gateway is deployed in a dedicated subnet. What is the minimum subnet size recommended for a production WAF_v2 deployment with autoscaling up to 125 instances?

Accepted Answer

/24 (256 addresses)

Answer

Microsoft recommends a /24 subnet for Application Gateway v2 production deployments to accommodate autoscaling and avoid address exhaustion.

Question 2

A company migrates from Application Gateway v1 to v2. What is the public IP address requirement for v2?

Accepted Answer

v2 requires a Standard SKU static public IP address

Answer

Application Gateway v2 requires a Standard SKU static public IP address; Basic SKU or dynamic IPs are not supported.

Question 3

An operations team wants to monitor WAF blocked requests in real time. Which Azure service should they configure to stream WAF logs for analysis?

Accepted Answer

Azure Monitor Diagnostic Settings to Log Analytics or Event Hub

Answer

WAF logs (ApplicationGatewayFirewallLog) can be streamed to Log Analytics, Event Hub, or Storage via Azure Monitor Diagnostic Settings.

Question 4

A backend pool contains three VMs. One VM is consistently causing HTTP 502 errors. Which Application Gateway log should be checked first to diagnose backend connectivity issues?

Accepted Answer

ApplicationGatewayAccessLog

Answer

The ApplicationGatewayAccessLog records all request-response details including backend server responses, making it the primary log for diagnosing 502 errors.

Question 5

An Application Gateway needs to inspect and route gRPC traffic. Which protocol must be configured in the listener to support gRPC?

Accepted Answer

HTTP/2 with HTTPS listener

Answer

gRPC uses HTTP/2 as its transport; Application Gateway must be configured with an HTTPS listener with HTTP/2 enabled to support gRPC traffic.

AZ-800 - Microsoft Azure Networking Solutions Practice Test

AZ-800 - Microsoft Azure Networking Solutions Practice Test

AZ-800 Application Gateway and WAF 5