SAA-C03 · Question #251
A solutions architect is designing a web application that will run on Amazon EC2 instances behind an Application Load Balancer (ALB). The company strictly requires that the application be resilient…
The correct answer is B. Deploy an appropriate managed rule for AWS WAF and associate it with the ALB. AWS WAF allows web applications to protect themselves from common web exploits and vulnerabilities. Using AWS managed rule groups ensures protection against known attack patterns, such as SQL injection and cross-site scripting. Associating AWS WAF with the ALB provides…
Question
A solutions architect is designing a web application that will run on Amazon EC2 instances behind an Application Load Balancer (ALB). The company strictly requires that the application be resilient against malicious internet activity and attacks, and protect against new common vulnerabilities and exposures. What should the solutions architect recommend?
Options
- ALeverage Amazon CloudFront with the ALB endpoint as the origin.
- BDeploy an appropriate managed rule for AWS WAF and associate it with the ALB.
- CSubscribe to AWS Shield Advanced and ensure common vulnerabilities and exposures are
- DConfigure network ACLs and security groups to allow only ports 80 and 443 to access the EC2
How the community answered
(23 responses)- A4% (1)
- B91% (21)
- C4% (1)
Explanation
AWS WAF allows web applications to protect themselves from common web exploits and vulnerabilities. Using AWS managed rule groups ensures protection against known attack patterns, such as SQL injection and cross-site scripting. Associating AWS WAF with the ALB provides application-layer security and real-time threat mitigation.
Community Discussion
No community discussion yet for this question.