nerdexam
Microsoft

AZ-500 · Question #510

Hotspot Question You have an Azure subscription that contains the virtual networks shown in the following table. NSG1 and NSG2 both have default rules only. The subscription contains the virtual…

The correct answer is A request to the backend pool from IP address 10.1.1.5 is allowed. = Yes; Incoming requests attempting file path attacks are blocked. = No; WAF1 allows a 50-MB file to be uploaded. = Yes. 10.1.1.5 is within the VNet address space associated with the backend pool, and since NSG1 and NSG2 have only default rules, inbound traffic from within the virtual network (VirtualNetwork service tag) is allowed by default, permitting the backend pool request. File path…

Submitted by suresh_in· Mar 6, 2026Implement and manage virtual networking / Configure network security (Azure Administrator AZ-104 or Azure Network Engineer AZ-700) - specifically covering WAF policies, NSG default rules, and Application Gateway WAF file upload limits.

Question

Hotspot Question You have an Azure subscription that contains the virtual networks shown in the following table. NSG1 and NSG2 both have default rules only. The subscription contains the virtual machines shown in the following table. The subscription contains the web apps shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer:

Exhibits

AZ-500 question #510 exhibit 1
AZ-500 question #510 exhibit 2

Answer Area

  • A request to the backend pool from IP address 10.1.1.5 is allowed.Yes
  • Incoming requests attempting file path attacks are blocked.No
  • WAF1 allows a 50-MB file to be uploaded.Yes

Explanation

10.1.1.5 is within the VNet address space associated with the backend pool, and since NSG1 and NSG2 have only default rules, inbound traffic from within the virtual network (VirtualNetwork service tag) is allowed by default, permitting the backend pool request. File path attacks (a Layer 7 OWASP threat) require WAF to be in Prevention mode to block them - if WAF1 is in Detection mode only, it will log but not block such attacks, making the 'No' answer correct for that statement. Azure Application Gateway WAF has a default maximum file upload size limit of 100 MB (configurable), so a 50-MB file upload falls well within the default limit and would be allowed by WAF1.

Topics

#Azure Application Gateway WAF#Network Security Groups#WAF Modes (Detection vs Prevention)#Azure Virtual Networks

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-500 Practice