Microsoft
AZ-900 · Question #255
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might h
The correct answer is A. No. A Web Application Firewall (WAF) is not suitable for filtering traffic between two subnets based on TCP/IP protocol, source/destination IP address, and port numbers, as its primary function is to protect web applications at Layer 7.
Submitted by saadiq_pk· Mar 5, 2026Describe Azure Architecture and Services
Question
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company has deployed Azure. There are two subnets and you are required to filter traffic between them. Filtering should be based on three things: TCP/IP Protocol in use Source IP/address and port number Destination IP address and port number. Solution: As a solution, you suggest Web Applications Firewall to be deployed and configured as the traffic filter. Does this meet the goal?
Options
- ANo
- BYes
How the community answered
(23 responses)- A78% (18)
- B22% (5)
Why each option
A Web Application Firewall (WAF) is not suitable for filtering traffic between two subnets based on TCP/IP protocol, source/destination IP address, and port numbers, as its primary function is to protect web applications at Layer 7.
ANoCorrect
BYes
Concept tested: Limitations of Web Application Firewall (WAF) for subnet traffic filtering
Source: https://learn.microsoft.com/en-us/azure/web-application-firewall/overview
Community Discussion
No community discussion yet for this question.