A company is planning to deploy WAF on Azure Application Gateway for a new web app. They have a limited budget and want to minimize costs while still getting protection. They are considering using detection mode initially to save on costs, but they are not sure if that is the right approach. What should they do?

Use detection mode initially to monitor traffic and then switch to prevention mode after tuning, as this does not affect the WAF pricing.

Use detection mode permanently to reduce the need for expensive rule tuning.

Deploy WAF on a smaller Application Gateway SKU to reduce costs, and use detection mode.

Use prevention mode from the start to avoid the cost of running detection mode.

A company uses Azure Application Gateway with WAF to protect a web app. They have identified a specific URL pattern that is being used for malicious scanning and want to block it immediately. What is the fastest way to implement this?

Add a custom rule to the WAF policy that matches the URL pattern and set the action to Block.

Enable the Microsoft_DefaultRuleSet and set the mode to Prevention.

Modify the application code to reject the URL pattern.

Use a network security group to block the source IPs.

A company has a web application that experiences seasonal traffic spikes. They are considering using Azure Front Door with WAF. The security team wants to ensure that WAF rules are consistently applied during spikes, but they are concerned about the cost of running WAF at scale. What should they consider?

Deploy WAF only during peak season and disable it otherwise.

Use Azure Application Gateway with WAF and manually scale the instance count.

Use a third-party WAF solution that offers fixed pricing.

Use Azure Front Door's WAF policy and rely on its automatic scaling.

A company's web application is behind Azure Front Door. They need to protect against cross-site scripting (XSS) attacks, but they also have a page that intentionally allows users to submit HTML content. How should you configure the WAF to allow the intended HTML while still blocking XSS?

Use a custom rule to block all requests containing ' '.

Enable the managed rule set for XSS and add a custom rule to allow the specific page or parameter.

Set the WAF policy to Detection mode to avoid blocking legitimate HTML.

Disable the XSS rules in the managed rule set.

Microsoft Certified:Azure Network Engineer Associate

Domain 5Objective 3

Design and Implement a Web Application Firewall (WAF) Deployment AZ-700 Practice Questions (Page 5)

Part of the Design and implement Azure network security services domain, which accounts for 15–20% of the AZ-700 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 2–4 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

5concepts

15–20%of the exam

Questions 21–25

21expert · hard
A company is planning to deploy WAF on Azure Application Gateway for a new web app. They have a limited budget and want to minimize costs while still getting protection. They are considering using detection mode initially to save on costs, but they are not sure if that is the right approach. What should they do?
Select an answer first
22foundation · easy
Which Azure service can host a WAF policy to protect a web application that is deployed on a virtual machine behind a load balancer?
Select an answer first
23application · medium
A company uses Azure Application Gateway with WAF to protect a web app. They have identified a specific URL pattern that is being used for malicious scanning and want to block it immediately. What is the fastest way to implement this?
Select an answer first
24expert · hard
A company has a web application that experiences seasonal traffic spikes. They are considering using Azure Front Door with WAF. The security team wants to ensure that WAF rules are consistently applied during spikes, but they are concerned about the cost of running WAF at scale. What should they consider?
Select an answer first
25application · medium
A company's web application is behind Azure Front Door. They need to protect against cross-site scripting (XSS) attacks, but they also have a page that intentionally allows users to submit HTML content. How should you configure the WAF to allow the intended HTML while still blocking XSS?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-700

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-700” is a trademark of its owner, used for identification only.

Design and Implement a Web Application Firewall (WAF) Deployment AZ-700 Practice Questions (Page 5)

Questions 21–25

Which Azure service can host a WAF policy to protect a web application that is deployed on a virtual machine behind a load balancer?

A company uses Azure Application Gateway with WAF to protect a web app. They have identified a specific URL pattern that is being used for malicious scanning and want to block it immediately. What is the fastest way to implement this?

A company's web application is behind Azure Front Door. They need to protect against cross-site scripting (XSS) attacks, but they also have a page that intentionally allows users to submit HTML content. How should you configure the WAF to allow the intended HTML while still blocking XSS?

Keep studying — Design and implement Azure network security services