A company is running a WAF in Detection mode and has been collecting logs for a month. They are now ready to switch to Prevention mode. However, they are concerned about false positives that could block legitimate users. What is the best way to minimize the risk?

Review the Detection mode logs to identify false positives and create custom allow rules for those patterns before switching.

Keep the WAF in Detection mode indefinitely.

Switch to Prevention mode and monitor user complaints.

Disable the managed rule set and use only custom rules.

A company's web app is experiencing a high volume of requests from a single IP address, which is causing performance issues. They want to block this IP at the WAF level. What should they configure?

Create a custom rule that blocks requests from that IP address.

Create a rate limit rule that allows only 1 request per minute from that IP.

Enable the managed rule set and set the IP reputation rule to Block mode.

Use Azure Front Door's caching to ignore requests from that IP.

Microsoft Certified:Azure Network Engineer Associate

Domain 5Objective 3

Design and Implement a Web Application Firewall (WAF) Deployment AZ-700 Practice Questions (Page 1)

Part of the Design and implement Azure network security services domain, which accounts for 15–20% of the AZ-700 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 2–4 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

5concepts

15–20%of the exam

Questions 1–5

1foundation · easy
A company plans to deploy Azure WAF for a web application that is hosted on Azure Front Door. Which resource must be created to associate the WAF policy with the application?
Select an answer first
2expert · hard
A company is running a WAF in Detection mode and has been collecting logs for a month. They are now ready to switch to Prevention mode. However, they are concerned about false positives that could block legitimate users. What is the best way to minimize the risk?
Select an answer first
3foundation · easy
When a WAF policy is in detection mode, where can you view the logs of matched rules?
Select an answer first
4application · medium
A company's web app is experiencing a high volume of requests from a single IP address, which is causing performance issues. They want to block this IP at the WAF level. What should they configure?
Select an answer first
5foundation · easy
Which Azure WAF capability is specifically designed to help protect web applications from distributed denial-of-service (DDoS) attacks that target the application layer?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-700

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-700” is a trademark of its owner, used for identification only.

Design and Implement a Web Application Firewall (WAF) Deployment AZ-700 Practice Questions (Page 1)

Questions 1–5

A company plans to deploy Azure WAF for a web application that is hosted on Azure Front Door. Which resource must be created to associate the WAF policy with the application?

A company is running a WAF in Detection mode and has been collecting logs for a month. They are now ready to switch to Prevention mode. However, they are concerned about false positives that could block legitimate users. What is the best way to minimize the risk?

When a WAF policy is in detection mode, where can you view the logs of matched rules?

A company's web app is experiencing a high volume of requests from a single IP address, which is causing performance issues. They want to block this IP at the WAF level. What should they configure?

Which Azure WAF capability is specifically designed to help protect web applications from distributed denial-of-service (DDoS) attacks that target the application layer?

Keep studying — Design and implement Azure network security services