You have an instance of Azure Web Application Firewall (WAF) on Azure Front Door. You plan to create a WAF rule that will block high rates of requests from a single IP address. You need to query Log…

The correct answer is B. AzureDiagnostics. Azure Front Door WAF logs are sent to the AzureDiagnostics table in Log Analytics when diagnostic settings are configured. This table contains fields such as clientIP, requestUri, action, and ruleName that let you analyze request rates per IP address and determine an…

Submitted by obi.ng· Apr 18, 2026

Question

You have an instance of Azure Web Application Firewall (WAF) on Azure Front Door. You plan to create a WAF rule that will block high rates of requests from a single IP address. You need to query Log Analytics to identify the optimal threshold for the rule. Which table should you query in Log Analytics?

Options

AAZFWThreatIntel
BAzureDiagnostics
CSecurityDetection
DAGWFirewallLogs

How the community answered

(54 responses)

A
4% (2)
B
78% (42)
C
6% (3)
D
13% (7)

Explanation

Azure Front Door WAF logs are sent to the AzureDiagnostics table in Log Analytics when diagnostic settings are configured. This table contains fields such as clientIP, requestUri, action, and ruleName that let you analyze request rates per IP address and determine an appropriate rate-limit threshold. AZFWThreatIntel is an Azure Firewall-specific table. AGWFirewallLogs is the resource-specific table for Application Gateway WAF, not Front Door WAF. SecurityDetection is not a standard table for WAF traffic analysis.

Community Discussion

No community discussion yet for this question.

Full AZ-700 Practice