nerdexam
Microsoft

AZ-204 · Question #335

You are developing a web app that is protected by Azure Web Application Firewall (WAF). All traffic to the web app is routed through an Azure Application Gateway instance that is used by multiple…

The correct answer is A. In the Azure Application Gateway's HTTP setting, enable the Use for App service setting. D. In the Azure Application Gateway's HTTP setting, set the value of the Override backend path. D: The ability to specify a host override is defined in the HTTP settings and can be applied to any back-end pool during rule creation. The ability to derive the host name from the IP or FQDN of the back-end pool members. HTTP settings also provide an option to dynamically pick…

Submitted by haruto_sh· Mar 30, 2026Implement Azure security

Question

You are developing a web app that is protected by Azure Web Application Firewall (WAF). All traffic to the web app is routed through an Azure Application Gateway instance that is used by multiple web apps. The web app address is contoso.azurewebsites.net. All traffic must be secured with SSL. The Azure Application Gateway instance is used by multiple web apps. You need to configure the Azure Application Gateway for the app. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Exhibit

AZ-204 question #335 exhibit

Options

  • AIn the Azure Application Gateway's HTTP setting, enable the Use for App service setting.
  • BConvert the web app to run in an Azure App service environment (ASE).
  • CAdd an authentication certificate for contoso.azurewebsites.net to the Azure Application gateway.
  • DIn the Azure Application Gateway's HTTP setting, set the value of the Override backend path

How the community answered

(29 responses)
  • A
    79% (23)
  • B
    7% (2)
  • C
    14% (4)

Explanation

D: The ability to specify a host override is defined in the HTTP settings and can be applied to any back-end pool during rule creation. The ability to derive the host name from the IP or FQDN of the back-end pool members. HTTP settings also provide an option to dynamically pick the host name from a back-end pool member's FQDN if configured with the option to derive host name from an individual back-end pool A (not C): SSL termination and end to end SSL with multi-tenant services. In case of end to end SSL, trusted Azure services such as Azure App service web apps do not require whitelisting the backends in the application gateway. Therefore, there is no need to add any authentication certificates. https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-web-app-

Topics

#Application Gateway#WAF#SSL termination#App Service backend

Community Discussion

No community discussion yet for this question.

Full AZ-204 Practice