App GW-WAF questions

Hi, I recently got the following questions from my client, would you be able to assist with these? Thanks in advance!

 

• Is DNS SEC supported and from when ? and if so does it work with the A record redirection possibility?
• DDOS Capcha to be able to confirm is this is “normal” traffic or an attack by pushing a capcha page from the WAF before it reaches the WebApp
• How fast does the APPGW-WAF scale, their concerns come from some other features they use that do not scale fast enough.
• Is it possible to put in an ignore rule for the url protection feature to be able to overwrite the url protection if there is a false positive.
• Is there a way to get visibility to the whitelisted IP range in the DDOS module and when is it possible to create your own whitelist?