Exam AZ-700 topic 3 question 6 discussion

Actual exam question from Microsoft's AZ-700

Question #: 6
Topic #: 3

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure application gateway that has Azure Web Application Firewall (WAF) enabled.
You configure the application gateway to direct traffic to the URL of the application gateway.
You attempt to access the URL and receive an HTTP 403 error. You view the diagnostics log and discover the following error.

You need to ensure that the URL is accessible through the application gateway from any IP address.
Solution: You add a rewrite rule for the host header.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️
The log shows that WAF rule with ruleId 920300 was trigged. Instead we should disable the WAF rule that has a ruleId 920300.
Reference:
https://docs.microsoft.com/en-us/azure/web-application-firewall/ag/web-application-firewall-troubleshoot

by ghmymmnvhtvtltkwiz at Nov. 8, 2022, 8:16 p.m.

Comments

Submit Cancel

alinuxguru70

5 months ago

Selected Answer: A

I most certainly can rewrite the rule { "name": "Exclude Rule 920300", "priority": "1", "ruleType": "MatchConditions", "matchConditions": [ { "matchVariables": [ { "variableName": "RequestHeaders", "operator": "Contains", "matchValue": "User-Agent", "negateCondition": false } ], "action": "Allow", "transforms": [ { "transformType": "SetVariable", "transformVariableName": "ctl:ruleRemoveById", "transformValue": "920300" } ] } ] }

upvoted 1 times