ANS-C01 · Question #240
A company has an internal web-based application that employees use. The company hosts the application over a VPN in the company's on-premises network. The application runs on a fleet of Amazon EC2…
The correct answer is A. Create an AWS WAF web ACL that includes rules to block SQL injection attacks. C. Replace the NLB with an Application Load Balancer. E. Associate the AWS WAF web ACL with the Application Load Balancer. NLB is a Layer 3/4 component WAF is a Layer 7 protection component WAF is not capable of acting on the content of not terminated TLS session (encrypted data) WAF is only available for ALB. So, consider changing NLB to ALB and use WAF with ALB
Question
A company has an internal web-based application that employees use. The company hosts the application over a VPN in the company's on-premises network. The application runs on a fleet of Amazon EC2 instances in a private subnet behind a Network Load Balancer (NLB) in the same subnet. The instances are in an Amazon EC2 Auto Scaling group. During a recent security incident, SQL injection occurred on the application. A network engineer must implement a solution to prevent SQL injection attacks in the future. Which combination of steps will meet these requirements? (Choose three.)
Options
- ACreate an AWS WAF web ACL that includes rules to block SQL injection attacks.
- BCreate an Amazon CloudFront distribution. Specify the EC2 instances as the origin.
- CReplace the NLB with an Application Load Balancer.
- DAssociate the AWS WAF web ACL with the NLB.
- EAssociate the AWS WAF web ACL with the Application Load Balancer.
- FAssociate the AWS WAF web ACL with the Amazon CloudFront distribution.
How the community answered
(59 responses)- A71% (42)
- B3% (2)
- D10% (6)
- F15% (9)
Explanation
NLB is a Layer 3/4 component WAF is a Layer 7 protection component WAF is not capable of acting on the content of not terminated TLS session (encrypted data) WAF is only available for ALB. So, consider changing NLB to ALB and use WAF with ALB
Community Discussion
No community discussion yet for this question.