CLF-C02 Question 118
Select 2Your company is deploying a web application on AWS and wants to ensure the application is secure. Which AWS components or resources can you use to enhance the security of the application? (Select TWO)
- A
AWS Identity and Access Management (IAM) to manage user access and permissions
- B
Amazon S3 Transfer Acceleration to speed up data transfers
- C
AWS WAF (Web Application Firewall) to protect against common web application threats
- D
Amazon EC2 Auto Scaling to maintain high application availability
- E
AWS CloudTrail to monitor and log API calls for auditing purposes
Show answer and explanation
Correct answers: A, C
Explanation
To enhance the security of a web application on AWS, tools like IAM and AWS WAF are crucial. IAM ensures proper access control, while AWS WAF provides protection against common web vulnerabilities. Other options like S3 Transfer Acceleration or Auto Scaling are useful for performance and availability but do not directly address security concerns.
- A. Correct.
AWS Identity and Access Management (IAM) is a critical security component for controlling user access and permissions to AWS resources, ensuring only authorized users can access resources.
- B. Incorrect.
Amazon S3 Transfer Acceleration is designed to speed up file transfers to S3 buckets but does not directly enhance application security.
- C. Correct.
AWS WAF (Web Application Firewall) protects applications from common web vulnerabilities like SQL injection and cross-site scripting, enhancing application security.
- D. Incorrect.
Amazon EC2 Auto Scaling ensures application availability by adjusting capacity but does not directly contribute to security.
- E. Incorrect.
AWS CloudTrail is a logging service for auditing and monitoring API calls but is not directly used for enhancing application security in real-time.