SAA-C03 · Question #715
An ecommerce company wants to improve the security posture of an application across multiple AWS accounts. The company uses an organization in AWS Organizations to manage the accounts. The…
The correct answer is B. Configure AWS Firewall Manager to manage security configurations. C. Configure AWS WAF ACL rules, and associate the rules with the ALB. E. Configure AWS Shield Advanced to protect the ALB. AWS Firewall Manager allows centralized management of security policies across all accounts in an AWS Organization. AWS WAF rules protect the application from web exploits like cross-site scripting and SQL injection. AWS Shield Advanced provides protection against DDoS attacks…
Question
An ecommerce company wants to improve the security posture of an application across multiple AWS accounts. The company uses an organization in AWS Organizations to manage the accounts. The application runs in Amazon EC2 Auto Scaling groups across multiple Availability Zones behind an Application Load Balancer (ALB) in the us-east-1 Region. The company needs a solution to protect the application against cross-site scripting, SQL injection, and DDoS attacks. The company wants to centrally manage all security administration for the accounts in the organization from one account. Which combination of actions will meet these requirements? (Choose three.)
Options
- AConfigure an Amazon CloudFront distribution to direct traffic to the ALB.
- BConfigure AWS Firewall Manager to manage security configurations.
- CConfigure AWS WAF ACL rules, and associate the rules with the ALB.
- DConfigure AWS Security Hub to manage security configurations.
- EConfigure AWS Shield Advanced to protect the ALB.
- FConfigure AWS Config to track and enforce compliance with the company's security policies.
How the community answered
(15 responses)- A7% (1)
- B53% (8)
- D13% (2)
- F27% (4)
Explanation
AWS Firewall Manager allows centralized management of security policies across all accounts in an AWS Organization. AWS WAF rules protect the application from web exploits like cross-site scripting and SQL injection. AWS Shield Advanced provides protection against DDoS attacks, meeting the company’s security requirements.
Community Discussion
No community discussion yet for this question.