AZ-700 · Question #65
You have an Azure Web Application Firewall (WAF) policy in prevention mode that is associated to an Azure Front Door instance. You need to configure the policy to meet the following requirements…
The correct answer is A. three custom rules that each has one condition. Each requirement demands a different WAF action, so they cannot be merged into a single rule. Rule 1: Log action with a geo-match condition for Australia. Rule 2: Block action with a geo-match condition for New Zealand. Rule 3: Rate limit action with an IP match condition for…
Question
You have an Azure Web Application Firewall (WAF) policy in prevention mode that is associated to an Azure Front Door instance. You need to configure the policy to meet the following requirements:
- Log all connections from Australia.
- Deny all connections from New Zealand.
- Deny all further connections from a network of 131.107.100.0/24 if
there are more than 100 connections during one minute. What is the minimum number of objects you should create?
Options
- Athree custom rules that each has one condition
- Bone custom rule that has three conditions
- Cone custom rule that has one condition
- Done rule that has two conditions and another rule that has one condition
How the community answered
(55 responses)- A71% (39)
- B7% (4)
- C18% (10)
- D4% (2)
Explanation
Each requirement demands a different WAF action, so they cannot be merged into a single rule. Rule 1: Log action with a geo-match condition for Australia. Rule 2: Block action with a geo-match condition for New Zealand. Rule 3: Rate limit action with an IP match condition for 131.107.100.0/24 (triggered after 100 connections per minute). In Azure WAF custom rules, a rule has exactly one action. Since the three scenarios require three distinct actions (Log, Block, Rate Limit), you need three separate custom rules. You cannot combine rules with different actions into one rule, ruling out options B, C, and D. Each rule requires only one condition, making option A the minimum: three custom rules, each with one condition.
Community Discussion
No community discussion yet for this question.