Plan and Implement Security for Public Access to Azure Resources AZ-500 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company has an Azure Application Gateway with WAF enabled. They want to allow only requests from a specific IP range and block all others, while still allowing the WAF to inspect traffic. What should they configure?

   • AUse the Application Gateway's listener to restrict IP addresses
   • BConfigure an NSG on the Application Gateway subnet to allow only the IP range
   • CAdd a custom rule to the WAF policy that allows the IP range and denies all other traffic
   • DEnable the managed rule set for IP restrictions
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   You are deploying Azure WAF with Application Gateway. Which component in Application Gateway is used to associate the WAF policy with a specific site or listener?

   • AThe health probe
   • BThe routing rule
   • CThe HTTP listener
   • DThe backend pool
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A company is using Azure Application Gateway to expose a web app. They need to support both HTTP and HTTPS traffic, but they want to redirect all HTTP traffic to HTTPS. They also want to protect the app from SQL injection. The app is hosted on VMs in a backend pool. What should they configure?

   • AConfigure an HTTP listener with a redirect rule to HTTPS, and enable WAF on the gateway.
   • BEnable HTTPS Only on the backend VMs.
   • CUse Azure Front Door to redirect HTTP to HTTPS and enable WAF.
   • DConfigure an HTTPS listener and enable WAF on the gateway.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   When you create an Azure Firewall using Azure Firewall Manager, what is the default behavior for the firewall policy's rule collection groups?

   • AThey include a default allow-all rule
   • BThey are empty and must be populated manually
   • CThey include a default deny-all rule
   • DThey are pre-populated with common security rules
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   Contoso runs a public-facing web app on Azure App Service. Security policy requires that all client traffic be encrypted in transit and that the app reject any plaintext HTTP requests. You need to enforce this while allowing the app to continue receiving traffic from the Azure Load Balancer health probes. What should you configure?

   • ASet HTTPS Only to On in the App Service TLS/SSL settings.
   • BPlace the App Service behind Azure Front Door and set Front Door to only forward HTTPS.
   • CConfigure a custom TLS/SSL binding with a certificate and require SNI.
   • DAdd an access restriction that denies all HTTP traffic from the Internet.
   Reveal Solution Discussion Select an answer first