WAF with Application Gateway in Azure - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is a Web Application Firewall (WAF) in Azure Application Gateway?

A WAF is a security feature in Azure Application Gateway that protects web applications by filtering and monitoring HTTP traffic to block malicious requests like SQL injection or cross-site scripting.

beginner

How does Azure Application Gateway WAF protect your web app?

It inspects incoming web traffic and blocks attacks based on predefined security rules, helping to prevent common web vulnerabilities and attacks.

intermediate

What is the difference between Detection and Prevention modes in WAF?

Detection mode only logs potential threats without blocking them, while Prevention mode actively blocks malicious traffic to protect the application.

beginner

Why is it important to enable WAF on Application Gateway for public-facing web apps?

Because public web apps are exposed to the internet and can be targeted by attackers, WAF helps protect them by filtering harmful traffic before it reaches the app.

intermediate

What are custom WAF rules in Azure Application Gateway?

Custom WAF rules let you create specific conditions to allow or block traffic based on your app’s unique needs, adding extra control beyond default rules.

What does Azure Application Gateway WAF primarily protect against?

A Data storage corruption

B Network hardware failures

C Web application attacks like SQL injection

D User password theft

WAF focuses on protecting web apps from attacks such as SQL injection and cross-site scripting.

Which WAF mode blocks malicious traffic instead of just logging it?

A Detection mode

B Prevention mode

C Monitoring mode

D Passive mode

Prevention mode actively blocks malicious requests, while Detection mode only logs them.

Where is Azure Application Gateway WAF deployed in relation to your web app?

A Between users and the web app

B Inside the web app code

C On the user's device

D On the database server

The WAF is placed in front of the web app to inspect and filter incoming traffic.

What can you customize in Azure Application Gateway WAF to fit your app’s needs?

A Custom WAF rules

B User interface themes

C Database schemas

D Network cables

Custom WAF rules allow you to define specific traffic filtering conditions.

Why should you enable WAF for public-facing web applications?

A To improve internet speed

B To increase user logins

C To reduce server storage

D To protect against web attacks

Public web apps are exposed to attacks, so WAF helps protect them by filtering harmful traffic.

Explain how Azure Application Gateway WAF protects a web application from attacks.

Think about how a security guard checks visitors before they enter a building.

Describe the difference between Detection and Prevention modes in Azure Application Gateway WAF.

One mode watches quietly, the other acts to stop danger.