A development team recently deployed a new version of a web application to production. After the release, penetration testing revealed a cross-site scripting vulnerability that could expose user…

The correct answer is B. AWS WAF. https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-xss-match.html

Submitted by krish.m· Mar 30, 2026Security and Compliance

Question

A development team recently deployed a new version of a web application to production. After the release, penetration testing revealed a cross-site scripting vulnerability that could expose user data. Which AWS service will mitigate this issue?

Options

AAWS Shield Standard
BAWS WAF
CElastic Load Balancing
DAmazon Cognito

How the community answered

(26 responses)

A
12% (3)
B
77% (20)
C
4% (1)
D
8% (2)

Explanation

https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-xss-match.html

Topics

#AWS WAF#XSS mitigation#web application security#penetration testing

Community Discussion

No community discussion yet for this question.

Full SOA-C02 Practice