CLF-C02 Question 121
Single answerYour company is hosting a web application on AWS that needs to protect against SQL injection and cross-site scripting (XSS) attacks. Which AWS service can you use to help mitigate these threats?
- A
AWS WAF
- B
Security Groups
- C
Network ACLs
- D
AWS Shield
Show answer and explanation
Correct answer: A
Explanation
AWS WAF is the appropriate service for protecting web applications from SQL injection and XSS attacks, as it operates at the application layer and offers customizable rules for monitoring and mitigating such threats. Other services like Security Groups, Network ACLs, and AWS Shield focus on different aspects of security, such as network traffic control and DDoS protection.
- A. Correct.
AWS WAF (Web Application Firewall) is designed specifically to protect web applications from common security threats such as SQL injection and cross-site scripting (XSS). It allows you to define rules to block or allow specific traffic based on these patterns.
- B. Incorrect.
Security Groups act as virtual firewalls to control inbound and outbound traffic to Amazon EC2 instances. However, they do not provide protection against application-layer threats like SQL injection or XSS.
- C. Incorrect.
Network ACLs (Access Control Lists) operate at the subnet level and control traffic at the network layer. They are not designed to address application-layer threats like SQL injection or XSS.
- D. Incorrect.
AWS Shield is a service that provides protection against Distributed Denial of Service (DDoS) attacks. While it is a key security service, it does not address SQL injection or XSS threats.