Easy1 markMultiple Choice

AWS SAA-C03 · Question 08 · Domain 1.2: Secure Workloads

A company hosts a web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The security team has detected SQL injection attempts against the application.<br/><br/>Which AWS service should a solutions architect deploy to block these attacks?

Answer options:

A.

AWS Shield Standard

B.

AWS Network Firewall

C.

AWS WAF

D.

Amazon GuardDuty

How to approach this question

Identify the service that protects against Layer 7 web exploits.

Full Answer

C.AWS WAF✓ Correct
AWS WAF
AWS WAF can be attached to an ALB, API Gateway, or CloudFront distribution to filter web traffic based on rules you define, such as blocking SQL injection (SQLi) patterns.

Common mistakes

Confusing AWS Shield (DDoS) with AWS WAF (Web exploits).

Practice the full AWS SAA-C03 Practice Exam 6

65 questions · hints · full answers · grading

More questions from this exam