PSE-PRISMACLOUD · Question #114
Amazon Web Services WAF can be enabled on which two resources?(Choose two.)
The correct answer is A. AWS CDN C. AWS ALB. AWS WAF is a Layer 7 (application layer) firewall that inspects HTTP/HTTPS traffic, so it can only attach to services that terminate web traffic. CloudFront (AWS CDN) is a global CDN that handles HTTP/HTTPS requests, and ALB (Application Load Balancer) operates at Layer 7…
Question
Amazon Web Services WAF can be enabled on which two resources?(Choose two.)
Options
- AAWS CDN
- BAWS NAT Gateway
- CAWS ALB
- DAWS NLB
How the community answered
(17 responses)- A94% (16)
- B6% (1)
Explanation
AWS WAF is a Layer 7 (application layer) firewall that inspects HTTP/HTTPS traffic, so it can only attach to services that terminate web traffic. CloudFront (AWS CDN) is a global CDN that handles HTTP/HTTPS requests, and ALB (Application Load Balancer) operates at Layer 7 - both are valid WAF attachment points.
Why the distractors are wrong:
- B (NAT Gateway): NAT Gateway is a network-level service for routing outbound traffic; it doesn't terminate or inspect HTTP/HTTPS requests, so WAF has nothing to hook into.
- D (NLB): Network Load Balancer operates at Layer 4 (TCP/UDP), not Layer 7. WAF requires HTTP/HTTPS context to evaluate rules, which NLB never sees.
Memory tip: Think "WAF = Web = Layer 7." Only services that speak HTTP/HTTPS can use WAF. ALB = Application (Layer 7) , NLB = Network (Layer 4) . For CloudFront vs. other AWS networking services, ask: "Does it serve web content?" - if yes, WAF can protect it.
Topics
Community Discussion
No community discussion yet for this question.