Are there specific types of applications more vulnerable to L7 DDoS attacks?

Applications that are heavily reliant on complex database queries, resource-intensive computations, or have poorly optimized code are more vulnerable to L7 DDoS attacks. APIs, login pages, search functionalities, and any resource that requires significant server-side processing are common targets.