Azure Application Gateway and WAF Flashcards
7 cards from real AZ-700 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Azure Application Gateway and WAF flashcards as text
What is the primary benefit of enabling SSL offloading on Azure Application Gateway?
Answer: Terminating SSL/TLS at the gateway to reduce backend server CPU overhead
SSL offloading terminates the SSL/TLS connection at the Application Gateway, allowing backend servers to handle unencrypted HTTP traffic and reducing their computational load.
What does end-to-end SSL mean in the context of Azure Application Gateway?
Answer: Traffic is encrypted from the client through the gateway to the backend servers
End-to-end SSL maintains encrypted HTTPS communication from client to Application Gateway, and the gateway re-encrypts traffic before sending it to backend servers.
Which Application Gateway feature allows you to add, remove, or modify HTTP request and response headers as traffic passes through?
Answer: Rewrite rules
Rewrite rules allow modification of HTTP request and response headers, as well as URL paths, as traffic flows through Application Gateway.
What is the function of a multi-site listener in Azure Application Gateway?
Answer: Routing traffic from multiple hostnames through a single gateway instance
Multi-site listeners enable hosting multiple web applications on the same Application Gateway by routing based on the host header in HTTP requests.
When you configure a URL redirect rule in Application Gateway, what does the gateway send to the client?
Answer: An HTTP redirect response instructing the browser to navigate to a different URL
URL redirect sends an HTTP 301 or 302 redirect response to the client, instructing the browser to request a different URL.
Which Application Gateway feature allows you to display branded HTML pages instead of default error responses for 403 and 502 status codes?
Answer: Custom error pages
Application Gateway supports custom error pages for HTTP 403 (WAF block) and 502 (bad gateway) responses, enabling a branded error experience.
Which backend member type is supported by Azure Application Gateway backend pools?
Answer: Virtual machines and VM scale set instances
Application Gateway backend pools support virtual machines, VM scale sets, App Service web apps, and on-premises servers accessible via IP or FQDN.