Skip to content
AZ-500
Secure networking
hard
Question 3 of 48

An Application Gateway WAF policy is running in prevention mode with OWASP anomaly scoring. A single matched rule has severity Critical. What is the expected result?

AThe request is logged but allowed because one rule match is never enough to block
BThe request is blocked because a Critical match contributes 5 and meets the blocking threshold
CThe request is routed to the backend and re-evaluated by Azure Firewall
DThe request is blocked only if at least two Warning rules also match

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.

Sign in to join the discussion