Correct Answer: Application Rule
Application Rules in Azure Firewall allow you to control outbound access based on Fully Qualified Domain Names (FQDNs) for HTTP/HTTPS protocols. Network rules are used for IP-based...
Correct Answer
Application Rule
Why This Answer Is Correct
Application Rules in Azure Firewall allow you to control outbound access based on Fully Qualified Domain Names (FQDNs) for HTTP/HTTPS protocols. Network rules are used for IP-based and port-based filtering. Since you need to allow specific domains, an Application Rule is the correct choice.
This question evaluates your knowledge of Azure Firewall — a core concept tested in Microsoft Certified: Azure Network Engineer Associate (AZ-700). Understanding Azure Firewall is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?
You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?
What is the primary difference between Azure Firewall and Network Security Groups (NSGs)?
Which Azure Firewall feature allows you to filter outbound traffic based on a list of domain names (e.g., allow *.microsoft.com)?
What is 'Azure Firewall Premium' specifically designed for?