nerdexam
Microsoft

AZ-500 · Question #511

Drag and Drop Question You have an Azure subscription. You create an Azure Firewall policy that has the rules shown in the following table. In which order should the rules be processed? To answer…

The correct answer is Rule2; Rule3; Rule4; Rule5; Rule1. Azure Firewall processes rules based on rule collection group priority first, then rule collection priority, and finally rule type order: DNAT rules are processed before Network rules, which are processed before Application rules. Within the same priority level, lower priority…

Submitted by obi.ng· Mar 6, 2026Implement and manage virtual networking / Configure and manage Azure Firewall - typically found in AZ-104 or AZ-700 certification domains covering network security and firewall rule prioritization.

Question

Drag and Drop Question You have an Azure subscription. You create an Azure Firewall policy that has the rules shown in the following table. In which order should the rules be processed? To answer, move all rules from the list of rules to the answer area and arrange them in the correct order. Answer:

Exhibits

AZ-500 question #511 exhibit 1
AZ-500 question #511 exhibit 2

Answer Area

Drag items

Rule1Rule2Rule3Rule4Rule5

Correct arrangement

  • Rule2
  • Rule3
  • Rule4
  • Rule5
  • Rule1

Explanation

Azure Firewall processes rules based on rule collection group priority first, then rule collection priority, and finally rule type order: DNAT rules are processed before Network rules, which are processed before Application rules. Within the same priority level, lower priority numbers are processed first (e.g., priority 100 before priority 200). Rule1 is processed last because it is an Application rule or has the lowest priority, while Rule2 is first due to being a DNAT rule or having the highest priority number (lowest value), following Azure Firewall's strict hierarchical processing order.

Topics

#Azure Firewall#Firewall Policy#Rule Processing Order#Network Security

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice