Designing and Implementing Microsoft Azure Networking Solutions — Question 39

You have an instance of Azure Web Application Firewall (WAF) on Azure Front Door.

You plan to create a WAF rule that will block high rates of requests from a single IP address.

You need to query Log Analytics to identify the optimal threshold for the rule.

Which table should you query in Log Analytics?

Answer options

• A. AZFWThreatIntel
• B. AzureDiagnostics
• C. SecurityDetection
• D. AGWFirewallLogs

Correct answer: B

Explanation

The correct answer is B, AzureDiagnostics, as it contains the necessary logs that can help identify the request rates and patterns for the WAF. The other options either do not contain relevant request data or focus on different aspects of security and threat intelligence, which are not suitable for determining request thresholds.