Application Gateway

Question 1

Use cases

Answer 1

HTTP/S
TLS / SSL Offload
Built-in WAF
Cookie affinity
URL routing

Question 2

Design considerations for Application Gateway

Answer 2

Only use if encryption it not needed from App Gateway to backend
Stateful apps should be avoided (apps that need client to connect to the same server)

Question 3

Configuration

Answer 3

1 - Frontend IP
2 - Listener HTTP/S, Cert SSL
3 - Rule/s
4 - Backend Pools
Health probes created automatically

Question 4

WAF Protection (5)

Answer 4

SQL injection
Cross-site scripting
HTTP request smuggling
Remote file inclusion
HTTP protocol anomalies

Question 5

WAF Mode and logs

Answer 5

Prevention
Detection
- Azure Monitor
- Azure Security Centre
- Log Analytics

Question 6

3rd Party Firewalls

Answer 6

Place in DMZ