nerdexam
Microsoft

AZ-305 · Question #339

Drag and Drop Question You plan to deploy an infrastructure solution that will contain the following configurations: - External users will access the infrastructure by using Azure Front Door. - Extern

The correct answer is Protection against Open Web Application Security Project (OWASP) vulnerabilities; IP filtering on a per-API level; Validation of Azure B2C JSON Web Tokens (JWTs). Azure Front Door provides WAF capabilities that protect against OWASP vulnerabilities at the edge/global layer, making it the appropriate service for that function. Azure API Management handles API-level controls such as IP filtering on a per-API basis using policies, allowing fi

Submitted by ashley.k· Mar 6, 2026Design and implement security for infrastructure solutions, including identity federation, API security, and edge protection using Azure networking and security services.

Question

Drag and Drop Question You plan to deploy an infrastructure solution that will contain the following configurations: - External users will access the infrastructure by using Azure Front Door. - External user access to the backend APIs hosted in Azure Kubernetes Service (AKS) will be controlled by using Azure API Management. - External users will be authenticated by an Azure AD B2C tenant that uses OpenID Connect-based federation with a third-party identity provider. Which function does each service provide? To answer, drag the appropriate functions to the correct services. Each function may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Answer:

Exhibit

AZ-305 question #339 exhibit

Answer Area

Drag items

Protection against Open Web Application Security Project (OWASP) vulnerabilitiesIP filtering on a per-API levelValidation of Azure B2C JSON Web Tokens (JWTs)

Correct arrangement

  • Protection against Open Web Application Security Project (OWASP) vulnerabilities
  • IP filtering on a per-API level
  • Validation of Azure B2C JSON Web Tokens (JWTs)

Explanation

Azure Front Door provides WAF capabilities that protect against OWASP vulnerabilities at the edge/global layer, making it the appropriate service for that function. Azure API Management handles API-level controls such as IP filtering on a per-API basis using policies, allowing fine-grained access control to backend APIs in AKS. Azure AD B2C, when configured with OpenID Connect federation, issues JWTs that API Management validates using its JWT validation policy to authenticate external users before allowing access to backend services.

Topics

#Azure API Management#Azure Front Door WAF#Azure AD B2C#Zero Trust Security Architecture

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-305 Practice