A large enterprise runs a critical web application on Azure Application Gateway with WAF in Prevention mode. After a recent update to the managed rule set, they are seeing an increase in false positives that block legitimate customer transactions. The security team needs to maintain protection but must reduce the impact on customers. They also need to keep detailed logs for compliance. What should they do?

Keep Prevention mode and manually add exceptions for each false positive as they are reported.

Switch the WAF policy to Detection mode and review logs for a week, then create custom allow rules for legitimate patterns before switching back to Prevention mode.

Disable the managed rule set and rely on custom rules only.

Switch to Detection mode permanently and rely on log analysis to identify attacks.

A company is deploying a new web application and wants to use Azure Front Door with WAF. They have a requirement to log all blocked requests for compliance purposes. What should they configure?

Enable diagnostic settings for the Front Door profile and select the WAF log category.

Use the Front Door activity log only.

Enable WAF metrics and view them in the portal.

Enable WAF logs and route them to a Log Analytics workspace.

A company has multiple web applications, each with different security requirements. They want to use a single Azure Application Gateway with WAF to protect all of them, but they need to apply different rule sets to different applications. What should they do?

Create a single WAF policy with all rules enabled and apply it to the entire gateway.

Use a separate Application Gateway for each application.

Configure the WAF policy at the gateway level and use custom rules to differentiate by hostname.

Associate a separate WAF policy with each listener or path-based rule on the Application Gateway.

An organization wants to protect its web app from bots that scrape content and skew analytics. They also want to allow known good bots like search engine crawlers. What should they configure in the WAF policy on Azure Front Door?

Use Azure Front Door's caching rules to prevent bots from accessing the site.

Enable the managed rule set and rely on the SQL injection rules to block bots.

Enable the bot protection rule set and set it to Block mode for unknown bots, while allowing known good bots.

Create a custom rule that blocks all requests with a User-Agent header that is not a known browser.

Microsoft Certified:Azure Network Engineer Associate

Domain 5Objective 3

Design and Implement a Web Application Firewall (WAF) Deployment AZ-700 Practice Questions (Page 2)

Part of the Design and implement Azure network security services domain, which accounts for 15–20% of the AZ-700 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 2–4 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

5concepts

15–20%of the exam

Questions 6–10

6expert · hard
A large enterprise runs a critical web application on Azure Application Gateway with WAF in Prevention mode. After a recent update to the managed rule set, they are seeing an increase in false positives that block legitimate customer transactions. The security team needs to maintain protection but must reduce the impact on customers. They also need to keep detailed logs for compliance. What should they do?
Select an answer first
7foundation · easy
A company wants to block requests from a specific set of IP addresses. Which Azure WAF feature should they use?
Select an answer first
8application · medium
A company is deploying a new web application and wants to use Azure Front Door with WAF. They have a requirement to log all blocked requests for compliance purposes. What should they configure?
Select an answer first
9application · medium
A company has multiple web applications, each with different security requirements. They want to use a single Azure Application Gateway with WAF to protect all of them, but they need to apply different rule sets to different applications. What should they do?
Select an answer first
10application · medium
An organization wants to protect its web app from bots that scrape content and skew analytics. They also want to allow known good bots like search engine crawlers. What should they configure in the WAF policy on Azure Front Door?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-700

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-700” is a trademark of its owner, used for identification only.

Design and Implement a Web Application Firewall (WAF) Deployment AZ-700 Practice Questions (Page 2)

Questions 6–10

A company wants to block requests from a specific set of IP addresses. Which Azure WAF feature should they use?

A company is deploying a new web application and wants to use Azure Front Door with WAF. They have a requirement to log all blocked requests for compliance purposes. What should they configure?

A company has multiple web applications, each with different security requirements. They want to use a single Azure Application Gateway with WAF to protect all of them, but they need to apply different rule sets to different applications. What should they do?

An organization wants to protect its web app from bots that scrape content and skew analytics. They also want to allow known good bots like search engine crawlers. What should they configure in the WAF policy on Azure Front Door?

Keep studying — Design and implement Azure network security services