MENU
A company wants to control the protection of its AWS resources. The company wants to block SQL injection attacks and cross-site scripting.
Which AWS service or feature meets these requirements?
Suggested Answer: B
Get Premium CLF-C02 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
16 comments · newest first
HE
Henrik Jensen
3 days ago
Going with B because SQLi and XSS are app-layer risks best blocked by a WAF.
AL
Alaine
1 month ago
WAF is the best fit. It provides rules for web traffic filtering.
JO
Jovita
2 months ago
AWS Shield is for DDoS protection, not these attacks.
RA
Raelene
2 months ago
Exactly! WAF is the right choice here. Security groups are too broad.
JO
Josphine
2 months ago
I feel like GuardDuty is more for threat detection, not prevention.
CA
Caprice
2 months ago
Agreed! WAF is designed for SQL injection and XSS.
MA
Marvel
2 months ago
I think it's AWS WAF. It specifically handles web application attacks.
ST
Staci
2 months ago
100% agree, WAF is the right choice here!
CH
Chanel
3 months ago
Wait, can AWS WAF really handle both SQL injection and XSS?
ME
Merilyn
3 months ago
Security groups are more about network access, not web attacks.
LI
Lisha
3 months ago
I thought GuardDuty was the go-to for security?
TI
Tiffiny
3 months ago
Definitely AWS WAF for blocking those attacks!
TY
Tyisha
3 months ago
I thought Security groups were for network access control, so I don't think they would help with SQL injection or XSS.
NA
Nadine
3 months ago
I practiced a similar question, and I believe AWS WAF was the answer there too. It seems to fit the requirements perfectly.
CA
Catarina
4 months ago
I'm not entirely sure, but I remember something about GuardDuty focusing more on threat detection rather than direct protection.
OL
Olene
4 months ago
I think AWS WAF is the right choice here since it specifically helps protect against SQL injection and XSS attacks.