Microsoft AZ-500 Exam - Topic 10 Question 44 Discussion

Actual exam question for Microsoft's AZ-500 exam

Question #: 44
Topic #: 10

Lab Task

Task 7

You need to ensure that connections through an Azure Application Gateway named Homepage-AGW are inspected for malicious requests.

Aseethetaskanswerwithstepbystepbelow

Show Suggested Answer

Suggested Answer: A

Enable Web Application Firewall (WAF) for the application gateway. You can use the Azure portal, Azure PowerShell, or the Azure CLI to do this. You need to select a WAF policy and a WAF mode for the application gateway. You can choose a predefined policy or create a custom policy with your own rules and exclusions.

Configure WAF policy settings. You can use the Azure portal, Azure PowerShell, or the Azure CLI to do this. You need to select the managed rulesets and rule groups that you want to enable or disable for the WAF policy. You can also configure custom rules to match specific patterns or conditions and take actions such as blocking or logging requests.

Monitor WAF logs. You can use different types of logs in Azure to manage and troubleshoot the application gateway and the WAF policy. You can access some of these logs through the portal, such as metrics and health probes. You can also export the logs to Azure Storage, Event Hubs, or Log Analytics and view them in different tools, such as Azure Monitor, Excel, or Power BI.

by Gertude at Jul 07, 2023, 05:47 PM

Limited Time Offer

25%

Off

Get Premium AZ-500 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Myra

4 months ago

I thought the default settings were enough, guess I was wrong!

upvoted 0 times

...

Laine

4 months ago

Don't forget to configure custom rules for better protection!

upvoted 0 times

...

Bobbye

4 months ago

Wait, can it really catch all malicious requests?

upvoted 0 times

...

Jovita

5 months ago

Totally agree, WAF is essential for security!

upvoted 0 times

...

Murray

5 months ago

You need to enable the Web Application Firewall feature.

upvoted 0 times

...

Ming

5 months ago

I think we also need to consider the pricing tier of the Application Gateway since it affects WAF features, but I need to double-check that.

upvoted 0 times

...

Annmarie

5 months ago

I believe we should check the diagnostic settings to ensure we're logging the requests, but I might be mixing it up with another task.

upvoted 0 times

...

Gail

5 months ago

I remember practicing a similar question where we had to enable WAF policies, but I can't recall if we need to set custom rules for this task.

upvoted 0 times

...

Refugia

6 months ago

I think we need to configure the Web Application Firewall (WAF) on the Application Gateway, but I'm not entirely sure about the specific rules to apply.

upvoted 0 times

...

Rutha

6 months ago

I'm pretty confident the answer is B. Creating a Screen Action to programmatically assign the widget to the Aggregate data makes the most sense to me.

upvoted 0 times

...

Julio

6 months ago

I'm pretty confident about this one. Option A clearly describes the synchronization of daily schedules, with all agents on a team starting their shifts within a specified time frame.

upvoted 0 times

...

Georgiana

6 months ago

I definitely practiced a similar question, and I think notifying the client is a mistake. We shouldn't alert them to suspicious activity, right?

upvoted 0 times

...

Denny

6 months ago

Wait, options C and D look identical - that's weird. I'll cross those out immediately.

upvoted 0 times

...