Microsoft Exam AZ-700 Topic 1 Question 70 Discussion

Actual exam question for Microsoft's AZ-700 exam

Question #: 70
Topic #: 1

SIMULATION

Task 3

You plan to implement an Azure application gateway in the East US Azure region. The application gateway will have Web Application Firewall (WAF) enabled.

You need to create a policy that can be linked to the planned application gateway. The policy must block connections from IP addresses in the 131.107.150.0/24 range. You do NOT need to provision the application gateway to complete this task.

ASee the Explanation below for step by step instructions

Show Suggested Answer

Suggested Answer: A

Here are the steps and explanations for creating a policy that can be linked to the planned application gateway and block connections from IP addresses in the 131.107.150.0/24 range:

To create a policy, you need to go to the Azure portal and selectCreate a resource.Search forWAF, selectWeb Application Firewall, then selectCreate1.

On theCreate a WAF policypage,Basicstab, enter or select the following information and accept the defaults for the remaining settings:

Policy for: Regional WAF (Application Gateway)

Subscription: Select your subscription name

Resource group: Select your resource group

Policy name: Type a unique name for your WAF policy

On theCustom rulestab, selectAdd a ruleto create a custom rule that blocks connections from IP addresses in the 131.107.150.0/24 range2. Enter or select the following information for the custom rule:

Rule name: Type a unique name for your custom rule

Priority: Type a number that indicates the order of evaluation for this rule

Rule type: Select Match rule

Match variable: Select RemoteAddr

Operator: Select IPMatch

Match values: Type 131.107.150.0/24

Action: Select Block

On theReview + createtab, review your settings and selectCreateto create your WAF policy1.

To link your policy to the planned application gateway, you need to go to theApplication Gatewayservice in the Azure portal and select your application gateway3.

On theWeb application firewalltab, select your WAF policy from the drop-down list and selectSave

by Lili at Sep 15, 2024, 05:39 AM

Limited Time Offer

25%

Off

Get Premium AZ-700 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Dusti

5 months ago

This is a piece of cake! Time to show off my Azure skills and get that WAF policy set up.

upvoted 0 times

...

Johna

5 months ago

Hmm, I wonder if the IP range is being used by the development team for testing. Maybe I should double-check before blocking it.

upvoted 0 times

...

Laurene

5 months ago

Alright, time to block those pesky hackers from that IP range. I'm on it!

upvoted 0 times

Tracey

3 months ago

Once the policy is created and linked to the application gateway, connections from that IP range will be blocked.

upvoted 0 times

...

Sena

3 months ago

We need to ensure that the Web Application Firewall (WAF) is enabled in the application gateway.

upvoted 0 times

...

Kenneth

4 months ago

Don't forget to enable the Web Application Firewall (WAF) as well.

upvoted 0 times

...

Anika

4 months ago

We need to make sure the policy is linked to the application gateway.

upvoted 0 times

...

Twila

4 months ago

Make sure to set up the policy to block IP addresses in the 131.107.150.0/24 range.

upvoted 0 times

...

Benton

4 months ago

Let's create a policy to block those IP addresses.

upvoted 0 times

...

Alisha

4 months ago

Let's create a policy to block connections from the specified IP range.

upvoted 0 times

...

Maile

5 months ago

I wonder if there are any other security measures we should consider implementing along with the WAF.

upvoted 0 times

...

Juliann

5 months ago

No need to provision the application gateway? That's good, one less thing to worry about. Let's focus on the WAF policy then.

upvoted 0 times

...

Alba

5 months ago

Wait, do I need to configure the application gateway itself? Or is it just the WAF policy that needs to be set up?

upvoted 0 times

Leonie

4 months ago

The policy must block connections from IP addresses in the specified range.

upvoted 0 times

...

Patrick

4 months ago

You just need to create a policy that can be linked to the planned application gateway.

upvoted 0 times

...

Catarina

4 months ago

No, you do not need to provision the application gateway for this task.

upvoted 0 times

...

Lavera

5 months ago

Okay, this seems straightforward. I'll need to create an IP address group in the WAF policy and add the 131.107.150.0/24 range to it.

upvoted 0 times

Kasandra

5 months ago

And we're done! The policy will now block connections from that IP range.

upvoted 0 times

...

Aretha

5 months ago

Make sure to link the policy to the planned application gateway.

upvoted 0 times

...

Kimi

5 months ago

Add the 131.107.150.0/24 range to the IP address group.

upvoted 0 times

...

Rueben

5 months ago

Let's start by creating an IP address group in the WAF policy.

upvoted 0 times

...

Dino

5 months ago

I agree, it's crucial to protect our application from potential threats.

upvoted 0 times

...

Maile

5 months ago

I think setting up a policy to block specific IP addresses is important for security.

upvoted 0 times

...