SAA-C03 Question #25: Real Exam Question with Answer & Explanation

Question

A company uses Amazon API Gateway to manage its REST APIs that third-party service providers access The company must protect the REST APIs from SQL injection and cross-site scripting attacks. What is the MOST operationally efficient solution that meets these requirements?

Options

• AConfigure AWS Shield.
• BConfigure AWS WAR
• CSet up API Gateway with an Amazon CloudFront distribution Configure AWS Shield in
• DSet up API Gateway with an Amazon CloudFront distribution. Configure AWS WAF in CloudFront

Explanation

Amazon API Gateway with CloudFront: API Gateway allows you to create, deploy, and manage APIs, while CloudFront provides a CDN to deliver content with low latency and high transfer AWS WAF (Web Application Firewall): AWS WAF can be configured in CloudFront to protect against common web exploits, including SQL injection and cross-site scripting (XSS). WAF allows you to create custom rules to block specific attack patterns and can be managed Deploy your APIs using Amazon API Gateway. Set up an Amazon CloudFront distribution in front of the API Gateway. Configure AWS WAF on the CloudFront distribution to apply security rules. Operational Efficiency: This solution provides robust protection with minimal operational overhead by leveraging managed AWS services, ensuring that your APIs are secure without extensive custom implementation.

No community discussion yet for this question.