A company is planning to enable WAF on a production application. Before switching to Prevention mode, they want to understand the potential impact of the managed rule set. What should they do first?

Review the rule documentation and estimate impact.

Run the WAF in Detection mode for a period and analyze the logs.

Disable the managed rule set and use only custom rules.

Enable Prevention mode and monitor for user complaints.

A company uses Azure Application Gateway with WAF. They have a form that accepts file uploads, and they want to block files that are known malware. What WAF feature should they use?

Enable the managed rule set for malware detection.

Use Azure Defender for Storage or a separate malware scanning service.

Add a custom rule to inspect the file content.

Set the WAF policy to Prevention mode and rely on the default rule set.

Microsoft Certified:Azure Network Engineer Associate

Domain 5Objective 3

Design and Implement a Web Application Firewall (WAF) Deployment AZ-700 Practice Questions (Page 3)

Part of the Design and implement Azure network security services domain, which accounts for 15–20% of the AZ-700 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 2–4 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

5concepts

15–20%of the exam

Questions 11–15

11foundation · easy
An organization needs to protect its web application from cross-site scripting (XSS) attacks. Which Azure WAF feature should they enable?
Select an answer first
12application · medium
A company is planning to enable WAF on a production application. Before switching to Prevention mode, they want to understand the potential impact of the managed rule set. What should they do first?
Select an answer first
13foundation · easy
Which WAF policy setting allows you to exclude certain request attributes (such as headers or cookies) from inspection by managed rules?
Select an answer first
14foundation · easy
When configuring a WAF policy, which setting determines whether the WAF blocks or allows traffic that matches a rule?
Select an answer first
15application · medium
A company uses Azure Application Gateway with WAF. They have a form that accepts file uploads, and they want to block files that are known malware. What WAF feature should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-700

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-700” is a trademark of its owner, used for identification only.

Design and Implement a Web Application Firewall (WAF) Deployment AZ-700 Practice Questions (Page 3)

Questions 11–15

An organization needs to protect its web application from cross-site scripting (XSS) attacks. Which Azure WAF feature should they enable?

A company is planning to enable WAF on a production application. Before switching to Prevention mode, they want to understand the potential impact of the managed rule set. What should they do first?

Which WAF policy setting allows you to exclude certain request attributes (such as headers or cookies) from inspection by managed rules?

When configuring a WAF policy, which setting determines whether the WAF blocks or allows traffic that matches a rule?

A company uses Azure Application Gateway with WAF. They have a form that accepts file uploads, and they want to block files that are known malware. What WAF feature should they use?

Keep studying — Design and implement Azure network security services