SCS-C02 · Question #464
A company is operating an open-source software platform that is internet facing. The legacy software platform no longer receives security updates. The software platform operates using Amazon Route…
The correct answer is A. Create an Application Load Balancer with the existing EC2 instances as a target group. Create an. The fastest and most effective way to protect an internet-facing application against SQL injection attacks is to use AWS WAF with preconfigured rules designed to mitigate SQL injection. By placing an Application Load Balancer (ALB) in front of the EC2 instances, the security…
Question
A company is operating an open-source software platform that is internet facing. The legacy software platform no longer receives security updates. The software platform operates using Amazon Route 53 weighted load balancing to send traffic to two Amazon EC2 instances that connect to an Amazon RDS cluster. A recent report suggests this software platform is vulnerable to SQL injection attacks, with samples of attacks provided. The company's security engineer must secure this system against SQL injection attacks within 24 hours. The security engineer's solution must involve the least amount of effort and maintain normal operations during implementation. What should the security engineer do to meet these requirements?
Options
- ACreate an Application Load Balancer with the existing EC2 instances as a target group. Create an
- BCreate an Amazon CloudFront distribution specifying one EC2 instance as an origin. Create an
- CObtain the latest source code for the platform and make the necessary updates. Test the updated
- DUpdate the security group that is attached to the EC2 instances, removing access from the
How the community answered
(15 responses)- A73% (11)
- B13% (2)
- C7% (1)
- D7% (1)
Explanation
The fastest and most effective way to protect an internet-facing application against SQL injection attacks is to use AWS WAF with preconfigured rules designed to mitigate SQL injection. By placing an Application Load Balancer (ALB) in front of the EC2 instances, the security engineer can apply an AWS WAF web ACL to filter out malicious requests, including SQL injection attempts, without making changes to the application code or disrupting service. This approach also: 1. Prevents direct internet access to the EC2 instances by using the ALB as the entry point. 2. Provides the option to quickly redirect Route 53 records to the ALB, ensuring minimal 3. Allows for rapid implementation, meeting the 24-hour requirement with minimal operational
Topics
Community Discussion
No community discussion yet for this question.