Exam AZ-700 topic 5 question 10 discussion

Actual exam question from Microsoft's AZ-700

Question #: 10
Topic #: 5

You have an Azure Front Door instance named FD1 that is protected by using Azure Web Application Firewall (WAF).
FD1 uses a frontend hast named app1.contoso.com to provide access to Azure web apps hosted in the East US Azure region and the West US Azure region.
You need to configure FD1 to block requests to app1.contoso.com from all countries other than the United States.
What should you include in the WAF policy?

A. a custom rule that uses a match rule
B. a frontend hast association
C. a custom rule that uses a rate limit rule
D. a managed rule set

Show Suggested Answer

Suggested Answer: A 🗳️

by StephenKDS at Sept. 19, 2022, 5:55 a.m.

Comments

Submit Cancel

StephenKDS

Highly Voted 1 year, 4 months ago

*hast = host

upvoted 13 times

...

sapien45

Highly Voted 1 year, 3 months ago

Selected Answer: A

Custom rules allow you to create tailored rules to suit the exact needs of your applications and security policies. Now, you can restrict access to your web applications by country/region. As with all custom rules, this logic can be compounded with other rules to suit the needs of your application. To create a geo-filtering custom rule in the Azure portal, simply select Geo location as the Match Type, and then select the country/region or countries/regions you want to allow/block from your application.

upvoted 6 times

...

omgMerrick

Most Recent 11 months, 1 week ago

Selected Answer: A

Answer is correct. A. a custom rule that uses a match rule Source: https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-geo-filtering

upvoted 2 times

...