nerdexam
Microsoft

AZ-305 · Question #51

Drag and Drop Question Your company has an existing web app that runs on Azure virtual machines. You need to ensure that the app is protected from SQL injection attempts and uses a layer-7 load…

The correct answer is Azure Application Gateway; Web Application Firewall (WAF). Azure Application Gateway is the correct layer-7 load balancer because it operates at the HTTP/HTTPS application layer and can route traffic based on URL paths, host headers, and other HTTP attributes - making it ideal for web applications without requiring code changes. Web…

Submitted by paula_co· Mar 6, 2026Design and Implement Network Security and Load Balancing Solutions in Azure (Azure Network Engineer / Azure Solutions Architect)

Question

Drag and Drop Question Your company has an existing web app that runs on Azure virtual machines. You need to ensure that the app is protected from SQL injection attempts and uses a layer-7 load balancer. The solution must minimize disruptions to the code of the app. What should you recommend? To answer, drag the appropriate services to the correct targets. Each service may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Answer:

Exhibit

AZ-305 question #51 exhibit

Answer Area

Drag items

Web Application Firewall (WAF)Azure Application GatewayAzure Load BalancerAzure Traffic ManagerSSL offloadingURL-based content routing

Correct arrangement

  • Azure Application Gateway
  • Web Application Firewall (WAF)

Explanation

Azure Application Gateway is the correct layer-7 load balancer because it operates at the HTTP/HTTPS application layer and can route traffic based on URL paths, host headers, and other HTTP attributes - making it ideal for web applications without requiring code changes. Web Application Firewall (WAF) is the correct service to protect against SQL injection because it is a feature integrated with Application Gateway that inspects incoming HTTP traffic for malicious patterns (including OWASP Top 10 threats like SQL injection) at the network edge, requiring zero changes to application code. Together, these two services satisfy both requirements: layer-7 load balancing and SQL injection protection with minimal disruption.

Topics

#Azure Application Gateway#Web Application Firewall#Layer-7 Load Balancing#Network Security

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-305 Practice