Correct Answer: Enable the Web Application Firewall (WAF) on Application Gateway with OWASP ruleset
The Web Application Firewall (WAF) on Azure Application Gateway uses OWASP Core Rule Sets (CRS) to inspect HTTP/HTTPS traffic and block common web exploits including SQL injection,...
Correct Answer
Enable the Web Application Firewall (WAF) on Application Gateway with OWASP ruleset
Why This Answer Is Correct
The Web Application Firewall (WAF) on Azure Application Gateway uses OWASP Core Rule Sets (CRS) to inspect HTTP/HTTPS traffic and block common web exploits including SQL injection, XSS, and other OWASP Top 10 threats. DDoS Protection defends against volumetric attacks at the network layer, not application-layer exploits.
This question evaluates your knowledge of Network Security — a core concept tested in Microsoft Certified: Azure Security Engineer Associate (AZ-500). Understanding Network Security is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Your organization has multiple VNets across different Azure regions. You need to ensure all traffic between VNets is inspected by a centralized Azure Firewall before being forwarded. Which Azure networking topology supports this at scale?
You need to allow Azure Virtual Machines in a subnet to access Azure Storage and Azure Key Vault without traversing the public internet, and without assigning public IP addresses to the VMs. Which Azure feature achieves this?