nerdexam
Amazon

CLF-C02 · Question #756

A retail company has recently migrated its website to AWS. The company wants to ensure that it is protected from SQL injection attacks. The website uses an Application Load Balancer to distribute traf

The correct answer is B. AWS WAF. AWS WAF lets you define custom rules (or use managed rule sets) to inspect HTTP requests and block typical web exploits such as SQL injection, and it integrates directly with an Application

Submitted by yaw92· Mar 6, 2026Security and Compliance

Question

A retail company has recently migrated its website to AWS. The company wants to ensure that it is protected from SQL injection attacks. The website uses an Application Load Balancer to distribute traffic to multiple Amazon EC2 instances. Which AWS service or feature can be used to create a custom rule that blocks SQL injection attacks?

Options

  • ASecurity groups
  • BAWS WAF
  • CNetwork ACLs
  • DAWS Shield

How the community answered

(55 responses)
  • A
    7% (4)
  • B
    78% (43)
  • C
    11% (6)
  • D
    4% (2)

Explanation

AWS WAF lets you define custom rules (or use managed rule sets) to inspect HTTP requests and block typical web exploits such as SQL injection, and it integrates directly with an Application

Community Discussion

No community discussion yet for this question.

Full CLF-C02 Practice