A WAF policy in prevention mode is associated with an Azure Front Door instance. You must implement these requirements: log all requests originating from Australia; block all requests from New Zealand; and if the network 131.107.100.0/24 exceeds 100 requests within one minute, block further requests from that network. What is the minimum number of WAF custom rule objects you should create to satisfy these requirements?

You need three separate custom WAF rules because each requirement has a distinct action (Log, Block) or a distinct matching condition that triggers a different action. 1. Log requests from Australia: This requires a custom rule with a geoMatch condition for Australia and an action of Log. 2. Block requests from New Zealand: This requires a separate custom rule with a geoMatch condition for New Zealand and an action of Block. 3. Block requests from 131.107.100.0/24 if rate limit exceeded: This requires a custom rate-limiting rule with an IPMatch condition for the specified CIDR and an action of Block when the rate limit is hit. Combining these into a single rule with multiple conditions would not work because the actions are different for each condition. For example, you cannot have one rule that simultaneously logs for Australia and blocks for New Zealand.