SCS-C02 · Question #398
SCS-C02 Question #398: Real Exam Question with Answer & Explanation
The correct answer is D: The EC2 instance running your WAF software is included in an Auto Scaling group and placed in. The below diagram shows how a WAF sandwich is created. Its the concept of placing the Ec2 instance which hosts the WAF software in between 2 elastic load balancers. Option A.B and C are incorrect since the EC2 Instance with the WAF software needs to be placed in an Autoscaling Gr
Question
DDoS attacks that happen at the application layer commonly target web applications with lower volumes of traffic compared to infrastructure attacks. To mitigate these types of attacks, you should probably want to include a WAF (Web Application Firewall) as part of your infrastructure. To inspect all HTTP requests, WAFs sit in-line with your application traffic. Unfortunately, this creates a scenario where WAFs can become a point of failure or bottleneck. To mitigate this problem, you need the ability to run multiple WAFs on demand during traffic spikes. This type of scaling for WAF is done via a "WAF sandwich." Which of the following statements best describes what a "WAF sandwich" is? Choose the correct answer from the options below
Options
- AThe EC2 instance running your WAF software is placed between your private subnets and any
- BThe EC2 instance running your WAF software is placed between your public subnets and your
- CThe EC2 instance running your WAF software is placed between your public subnets and your
- DThe EC2 instance running your WAF software is included in an Auto Scaling group and placed in
Explanation
The below diagram shows how a WAF sandwich is created. Its the concept of placing the Ec2 instance which hosts the WAF software in between 2 elastic load balancers. Option A.B and C are incorrect since the EC2 Instance with the WAF software needs to be placed in an Autoscaling Group.
Community Discussion
No community discussion yet for this question.