nerdexam
Microsoft

AZ-500 · Question #174

SIMULATION You need to ensure that connections through an Azure Application Gateway named Homepage- AGW are inspected for malicious requests. To complete this task, sign in to the Azure portal. You…

Enabling the Web Application Firewall (WAF) on an Azure Application Gateway is the correct approach because WAF provides centralized inspection and protection of web applications from common exploits and malicious requests using OWASP rule sets. The WAF V2 tier must be selected…

Submitted by packet_pusher· Mar 6, 2026Implement and manage network security - specifically configuring Azure Application Gateway WAF to protect web applications from malicious HTTP/HTTPS traffic, aligning with the AZ-104 or AZ-500 certification domain of securing Azure infrastructure and services.

Question

SIMULATION You need to ensure that connections through an Azure Application Gateway named Homepage- AGW are inspected for malicious requests. To complete this task, sign in to the Azure portal. You do not need to wait for the task to complete. Answer: You need to enable the Web Application Firewall on the Application Gateway. 1. In the Azure portal, type Application gateways in the search box, select Application gateways from the search results then select the gateway named Homepage-AGW. Alternatively, browse to Application Gateways in the left navigation pane. 2. In the properties of the application gateway, click on Web application firewall. 3. For the Tier setting, select WAF V2. 4. In the Firewall status section, click the slider to switch to Enabled. 5. In the Firewall mode section, click the slider to switch to Prevention. 6. Click Save to save the changes.

Explanation

Enabling the Web Application Firewall (WAF) on an Azure Application Gateway is the correct approach because WAF provides centralized inspection and protection of web applications from common exploits and malicious requests using OWASP rule sets. The WAF V2 tier must be selected to support WAF capabilities, and setting the Firewall mode to 'Prevention' ensures that detected malicious requests are actively blocked rather than just logged (Detection mode). Saving the configuration applies the changes immediately, fulfilling the requirement to inspect connections for malicious traffic.

Topics

#Azure Application Gateway#Web Application Firewall (WAF)#Network Security#Azure Portal Configuration

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice