exam questions

Exam AZ-305 All Questions

View all questions & answers for the AZ-305 exam

Exam AZ-305 topic 4 question 8 discussion

Actual exam question from Microsoft's AZ-305
Question #: 8
Topic #: 4
[All AZ-305 Questions]

DRAG DROP -
Your company has an existing web app that runs on Azure virtual machines.
You need to ensure that the app is protected from SQL injection attempts and uses a layer-7 load balancer. The solution must minimize disruptions to the code of the app.
What should you recommend? To answer, drag the appropriate services to the correct targets. Each service may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:

Show Suggested Answer Hide Answer
Suggested Answer:
Box 1: Azure Application Gateway
The Azure Application Gateway Web Application Firewall (WAF) provides protection for web applications. These protections are provided by the Open Web
Application Security Project (OWASP) Core Rule Set (CRS).
Box 2: Web Application Firewall (WAF)
Reference:
https://docs.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-customize-waf-rules-portal

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Eltooth
Highly Voted 2 years, 11 months ago
Correct answer - App Gateway and WAF. WAF v2 has latest OWASP rules (3.2) in preview and requires App Gateway with required /24 subnet to deploy.
upvoted 31 times
...
Davin0406
Highly Voted 2 years, 1 month ago
Azure Application Gateway and WAF. appeared in exam, 10/14/2022. I passed with 946/1000 and there were only 1~2 new questions but others were all from AZ-305 dump.
upvoted 27 times
...
SeMo0o0o0o
Most Recent 3 weeks, 1 day ago
CORRECT
upvoted 1 times
...
Len83
3 months, 4 weeks ago
This question appeared in the exam, August 2024. I gave this same answer listed here. I scored 870
upvoted 3 times
...
Lazylinux
7 months, 3 weeks ago
Given Answer is correct Layer 7 is App GWY WAF feature for app is protected from SQL injection attempts
upvoted 1 times
...
azkumar305
1 year, 7 months ago
Got this on 14-Apr-2023
upvoted 11 times
...
casmo
2 years, 1 month ago
Correct Answer
upvoted 2 times
...
Darkx
2 years, 1 month ago
appeared on 11th Oct 2022
upvoted 5 times
...
kaushik
2 years, 3 months ago
was in my exam 31-08- 2022
upvoted 6 times
...
Haripr
2 years, 5 months ago
was in my exam 29 June 2022
upvoted 5 times
...
al608
2 years, 5 months ago
did my Exam today. This was on there.
upvoted 2 times
...
Gor
2 years, 6 months ago
App Gateway and WAF. https://docs.microsoft.com/en-us/azure/architecture/guide/technology-choices/load-balancing-overview
upvoted 1 times
...
Teringzooi
2 years, 7 months ago
Correct answer: Application Gateway and WAF WAF v2 has latest OWASP rules (3.2) in preview and requires App Gateway with required /24 subnet to deploy.
upvoted 2 times
...
Justin0020
2 years, 9 months ago
Was in my exam om March. 10
upvoted 6 times
...
jkklim
2 years, 9 months ago
https://docs.microsoft.com/en-us/azure/application-gateway/overview correct answer
upvoted 6 times
jkklim
2 years, 9 months ago
https://docs.microsoft.com/en-us/azure/architecture/guide/technology-choices/load-balancing-overview Above URL will shows azure appliction gateway vs azure traffic manager (both are layer 7). But application gateway is the anwser for IaaS INFRASTRUTURE (AZURE VM)
upvoted 5 times
jkklim
2 years, 9 months ago
always remember that application gateway can contains WAF, the rest cannot
upvoted 4 times
...
FrancisFerreira
2 years, 8 months ago
Traffic Manager is *not* Layer 7. It is DNS-based.
upvoted 4 times
FabioVi
2 years, 7 months ago
I think that DNS layer is indeed layer 7...
upvoted 8 times
...
AdventureChick
1 year, 2 months ago
Yes, Traffic Manager is DNS - Layer 7 based. Google "what layer is Azure Traffic Manager". The Google results show (in something like 48 point font) that Traffic Manager is Layer-7.
upvoted 1 times
ConanBarb
1 year, 2 months ago
sorry no, not L7 DNS-based means it does not know anything about url:s etc, ie not L7 see here "it load balances only at the domain level" https://learn.microsoft.com/en-us/azure/architecture/guide/technology-choices/load-balancing-overview
upvoted 2 times
...
...
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...