SCS-C02 Question 89
Single answerAn organization is hosting a web application behind an Application Load Balancer (ALB) in AWS. To meet compliance requirements, they must implement a solution to protect the application from SQL injection, cross-site scripting (XSS), and bots, while also ensuring that legitimate traffic is not blocked. Which AWS service should they use to meet these requirements?
- A
AWS WAF (Web Application Firewall)
- B
AWS Shield Standard
- C
AWS Network Firewall
- D
Amazon GuardDuty
Show answer and explanation
Correct answer: A
Explanation
To protect web applications from SQL injection, XSS, and bots, AWS WAF is the appropriate service. It allows the creation of custom rules or the use of managed rule groups to address common web application vulnerabilities. Other services like Shield Standard, Network Firewall, and GuardDuty serve different purposes and do not meet the specific requirements of the scenario.
- A. Correct.
AWS WAF is specifically designed to protect web applications from SQL injection, cross-site scripting (XSS), and bots. It allows you to define rules to filter and monitor HTTP requests, providing fine-grained protection for web applications.
- B. Incorrect.
AWS Shield Standard protects against Distributed Denial of Service (DDoS) attacks, not specific web application vulnerabilities like SQL injection or XSS.
- C. Incorrect.
AWS Network Firewall is designed for network layer protections, such as stateful inspection and intrusion detection, and is not tailored for web application-specific threats like SQL injection or XSS.
- D. Incorrect.
Amazon GuardDuty is a threat detection service that identifies malicious or unauthorized behavior in AWS environments, but it does not provide web application protection against SQL injection or XSS.