nerdexam
Amazon

SCS-C02 · Question #325

You have a web site that is sitting behind AWS Cloudfront. You need to protect the web site against threats such as SQL injection and Cross site scripting attacks. Which of the following service can…

The correct answer is B. AWS WAF. The AWS Documentation mentions the following AWS WAF is a web application firewall that helps detect and block malicious web requests targeted at your web applications. AWS WAF allows you to create rules that can help protect against common web exploits like SQL injection and…

Submitted by fatima_kr· Mar 6, 2026Infrastructure Security

Question

You have a web site that is sitting behind AWS Cloudfront. You need to protect the web site against threats such as SQL injection and Cross site scripting attacks. Which of the following service can help in such a scenario

Options

  • AAWS Trusted Advisor
  • BAWS WAF
  • CAWS Inspector
  • DAWS Config

How the community answered

(63 responses)
  • A
    13% (8)
  • B
    75% (47)
  • C
    8% (5)
  • D
    5% (3)

Explanation

The AWS Documentation mentions the following AWS WAF is a web application firewall that helps detect and block malicious web requests targeted at your web applications. AWS WAF allows you to create rules that can help protect against common web exploits like SQL injection and cross-site scripting. With AWS WAF you first identify the resource (either an Amazon CloudFront distribution or an Application Load Balancer) that you need to protect. Option A is invalid because this will only give advise on how you can better the security in your AWS account but not protect against threats mentioned in the question. Option C is invalid because this can be used to scan EC2 Instances for vulnerabilities but not protect against threats mentioned in the question. Option D is invalid because this can be used to check config changes but not protect against threats mentioned in the quest https://aws.amazon.com/waf/details;

Topics

#AWS WAF#SQL injection#XSS#CloudFront

Community Discussion

No community discussion yet for this question.

Full SCS-C02 Practice