Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft AZ-700 Exam - Topic 1 Question 70 Discussion

SIMULATIONTask 3You plan to implement an Azure application gateway in the East US Azure region. The application gateway will have Web Application Firewall (WAF) enabled.You need to create a policy that can be linked to the planned application gateway. The policy must block connections from IP addresses in the 131.107.150.0/24 range. You do NOT need to provision the application gateway to complete this task.
A) See the Explanation below for step by step instructions

Microsoft AZ-700 Exam - Topic 1 Question 70 Discussion

Actual exam question for Microsoft's AZ-700 exam
Question #: 70
Topic #: 1
[All AZ-700 Questions]

SIMULATION

Task 3

You plan to implement an Azure application gateway in the East US Azure region. The application gateway will have Web Application Firewall (WAF) enabled.

You need to create a policy that can be linked to the planned application gateway. The policy must block connections from IP addresses in the 131.107.150.0/24 range. You do NOT need to provision the application gateway to complete this task.

Show Suggested Answer Hide Answer
Suggested Answer: A

Here are the steps and explanations for creating a policy that can be linked to the planned application gateway and block connections from IP addresses in the 131.107.150.0/24 range:

To create a policy, you need to go to the Azure portal and selectCreate a resource.Search forWAF, selectWeb Application Firewall, then selectCreate1.

On theCreate a WAF policypage,Basicstab, enter or select the following information and accept the defaults for the remaining settings:

Policy for: Regional WAF (Application Gateway)

Subscription: Select your subscription name

Resource group: Select your resource group

Policy name: Type a unique name for your WAF policy

On theCustom rulestab, selectAdd a ruleto create a custom rule that blocks connections from IP addresses in the 131.107.150.0/24 range2. Enter or select the following information for the custom rule:

Rule name: Type a unique name for your custom rule

Priority: Type a number that indicates the order of evaluation for this rule

Rule type: Select Match rule

Match variable: Select RemoteAddr

Operator: Select IPMatch

Match values: Type 131.107.150.0/24

Action: Select Block

On theReview + createtab, review your settings and selectCreateto create your WAF policy1.

To link your policy to the planned application gateway, you need to go to theApplication Gatewayservice in the Azure portal and select your application gateway3.

On theWeb application firewalltab, select your WAF policy from the drop-down list and selectSave


by Lili at Sep 15, 2024, 05:39 AM

Limited Time Offer

25%

Off

Get Premium AZ-700 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Josefa
10 months ago
I thought WAF only worked with specific rules, not IP blocks?
upvoted 0 times
...
Alonzo
10 months ago
Just make sure to test the policy after applying it!
upvoted 0 times
...
Ilene
10 months ago
Wait, are we sure about that IP range? Seems odd.
upvoted 0 times
...
Thaddeus
10 months ago
Totally agree, it's straightforward.
upvoted 0 times
...
Andree
10 months ago
You can block IPs in WAF policies easily!
upvoted 0 times
...
Meghan
11 months ago
I think we just need to focus on the IP blocking part, but I can't recall if there are any specific syntax rules we need to follow.
upvoted 0 times
...
Simona
11 months ago
I feel a bit confused about whether we need to set any additional parameters for the policy. Did we cover that in our study sessions?
upvoted 0 times
...
Margart
11 months ago
This seems similar to that practice question where we had to block certain IPs. I think we just need to define the rule in the policy.
upvoted 0 times
...
Glendora
11 months ago
I remember we practiced creating WAF policies, but I'm not entirely sure how to specify the IP range correctly.
upvoted 0 times
...
Berry
11 months ago
This seems straightforward enough. I'll create the WAF policy, add the IP group, and then link it to the application gateway. Shouldn't take too long to complete.
upvoted 0 times
...
Cary
11 months ago
Wait, do I need to actually provision the application gateway, or just create the policy? I want to make sure I understand the requirements correctly before I start.
upvoted 0 times
...
Jackie
11 months ago
No problem, I've done this kind of thing before. I'll create a custom WAF policy, add an IP group with the specified range, and then link that to the application gateway. Easy peasy.
upvoted 0 times
...
Nickie
11 months ago
Okay, I need to create a WAF policy that blocks connections from a specific IP range. I'm a bit unsure about the exact steps, but I'll review the Azure documentation and try to figure it out.
upvoted 0 times
...
Tresa
11 months ago
Hmm, this looks like a straightforward WAF policy configuration task. I think I can handle this.
upvoted 0 times
...
Shaquana
12 months ago
This kind of scenario reminds me of a practice case we discussed where it was crucial to declare any conflicts. So, option D seems risky but necessary to maintain transparency.
upvoted 0 times
...
Dusti
2 years ago
This is a piece of cake! Time to show off my Azure skills and get that WAF policy set up.
upvoted 0 times
...
Johna
2 years ago
Hmm, I wonder if the IP range is being used by the development team for testing. Maybe I should double-check before blocking it.
upvoted 0 times
...
Laurene
2 years ago
Alright, time to block those pesky hackers from that IP range. I'm on it!
upvoted 0 times
Tracey
2 years ago
Once the policy is created and linked to the application gateway, connections from that IP range will be blocked.
upvoted 0 times
...
Sena
2 years ago
We need to ensure that the Web Application Firewall (WAF) is enabled in the application gateway.
upvoted 0 times
...
Kenneth
2 years ago
Don't forget to enable the Web Application Firewall (WAF) as well.
upvoted 0 times
...
Anika
2 years ago
We need to make sure the policy is linked to the application gateway.
upvoted 0 times
...
Twila
2 years ago
Make sure to set up the policy to block IP addresses in the 131.107.150.0/24 range.
upvoted 0 times
...
Benton
2 years ago
Let's create a policy to block those IP addresses.
upvoted 0 times
...
Alisha
2 years ago
Let's create a policy to block connections from the specified IP range.
upvoted 0 times
...
...
Maile
2 years ago
I wonder if there are any other security measures we should consider implementing along with the WAF.
upvoted 0 times
...
Juliann
2 years ago
No need to provision the application gateway? That's good, one less thing to worry about. Let's focus on the WAF policy then.
upvoted 0 times
...
Alba
2 years ago
Wait, do I need to configure the application gateway itself? Or is it just the WAF policy that needs to be set up?
upvoted 0 times
Leonie
2 years ago
The policy must block connections from IP addresses in the specified range.
upvoted 0 times
...
Patrick
2 years ago
You just need to create a policy that can be linked to the planned application gateway.
upvoted 0 times
...
Catarina
2 years ago
No, you do not need to provision the application gateway for this task.
upvoted 0 times
...
...
Lavera
2 years ago
Okay, this seems straightforward. I'll need to create an IP address group in the WAF policy and add the 131.107.150.0/24 range to it.
upvoted 0 times
Kasandra
2 years ago
And we're done! The policy will now block connections from that IP range.
upvoted 0 times
...
Aretha
2 years ago
Make sure to link the policy to the planned application gateway.
upvoted 0 times
...
Kimi
2 years ago
Add the 131.107.150.0/24 range to the IP address group.
upvoted 0 times
...
Rueben
2 years ago
Let's start by creating an IP address group in the WAF policy.
upvoted 0 times
...
...
Dino
2 years ago
I agree, it's crucial to protect our application from potential threats.
upvoted 0 times
...
Maile
2 years ago
I think setting up a policy to block specific IP addresses is important for security.
upvoted 0 times
...

Save Cancel