nerdexam
Amazon

SCS-C02 · Question #398

DDoS attacks that happen at the application layer commonly target web applications with lower volumes of traffic compared to infrastructure attacks. To mitigate these types of attacks, you should prob

Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #398. The question stem and answer options stay visible for context.

Submitted by parkjh· Mar 6, 2026Infrastructure Security

Question

DDoS attacks that happen at the application layer commonly target web applications with lower volumes of traffic compared to infrastructure attacks. To mitigate these types of attacks, you should probably want to include a WAF (Web Application Firewall) as part of your infrastructure. To inspect all HTTP requests, WAFs sit in-line with your application traffic. Unfortunately, this creates a scenario where WAFs can become a point of failure or bottleneck. To mitigate this problem, you need the ability to run multiple WAFs on demand during traffic spikes. This type of scaling for WAF is done via a "WAF sandwich." Which of the following statements best describes what a "WAF sandwich" is? Choose the correct answer from the options below

Exhibit

SCS-C02 question #398 exhibit

Options

  • AThe EC2 instance running your WAF software is placed between your private subnets and any
  • BThe EC2 instance running your WAF software is placed between your public subnets and your
  • CThe EC2 instance running your WAF software is placed between your public subnets and your
  • DThe EC2 instance running your WAF software is included in an Auto Scaling group and placed in

Unlock SCS-C02 to see the answer

You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#AWS WAF#Auto Scaling#layer 7 DDoS#application security
Full SCS-C02 Practice