SAA-C03 · Question #645
A company uses AWS WAF to protect its web applications. A solutions architect configures a web ACL that uses several rules, including a rule that inspects the HTTP request body for malicious content.
The correct answer is A. Create two custom AWS WAF rules. Configure one rule to block all oversized requests. Configure. AWS WAF has a maximum request body inspection size limit (8 MB). When a request exceeds this size, WAF stops inspecting the body and labels it as an oversized request. The best practice is to create a rule to block oversized requests and optionally add a higher-priority allow rul
Question
A company uses AWS WAF to protect its web applications. A solutions architect configures a web ACL that uses several rules, including a rule that inspects the HTTP request body for malicious content. The solutions architect notices that the web ACL is not inspecting large HTTP POST requests properly. As a result, suspicious activities are not being detected. Some large HTTP POST requests are more than 8 MB in size. The solutions architect must ensure that the web ACL inspects the large HTTP POST requests properly. Which solution will meet this requirement?
Options
- ACreate two custom AWS WAF rules. Configure one rule to block all oversized requests. Configure
- BEnable AWS Shield Advanced. Reconfigure the web ACL to block oversized requests by using
- CVerify that the Content-Type header is correctly set in the HTTP requests that AWS WAF rules
- DCreate an AWS Lambda function to preprocess the large requests before AWS rules inspect the
How the community answered
(20 responses)- A75% (15)
- B5% (1)
- C5% (1)
- D15% (3)
Explanation
AWS WAF has a maximum request body inspection size limit (8 MB). When a request exceeds this size, WAF stops inspecting the body and labels it as an oversized request. The best practice is to create a rule to block oversized requests and optionally add a higher-priority allow rule to permit large requests only from trusted or legitimate sources. This ensures that potentially malicious large POST requests do not bypass inspection while maintaining proper access for approved clients.
Community Discussion
No community discussion yet for this question.