Discuss Amazon CLF-C02 Exam Topic 3 Question 57

Which AWS service or feature offers HTTP attack protection to users running public-facing web applications?

ASecurity groups

BNetwork ACLs

CAWS Shield Standard

DAWS WAF

Suggested Answer: D

AWS WAF is the AWS service or feature that offers HTTP attack protection to users running public-facing web applications. AWS WAF is a web application firewall that helps users protect their web applications from common web exploits, such as SQL injection, cross-site scripting, and bot attacks. Users can create custom rules to define the web traffic that they want to allow, block, or count. Users can also use AWS Managed Rules, which are pre-configured rules that are curated and maintained by AWS or AWS Marketplace Sellers. AWS WAF can be integrated with other AWS services, such as Amazon CloudFront, Amazon API Gateway, and Application Load Balancer, to provide comprehensive security for web applications. [AWS WAF Overview]AWS Certified Cloud Practitioner - aws.amazon.com

Get Premium CLF-C02 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

25 comments · newest first

Minhee Vo 14 days ago

D makes the most sense here because AWS WAF handles HTTP attack protection for public web apps, the tricky part being the HTTP layer focus.

Melissa Turner 13 days ago

↳ replying to Minhee Vo

Wouldn't C be more about edge DDoS protection rather than HTTP attack protection for public web apps?

Dallas 26 days ago

Both are important, but I’d pick C) AWS Shield for overall protection.

Shonda 1 month ago

I’m leaning towards D) AWS WAF. It gives more control over traffic.

Dudley 1 month ago

True, but Shield is automatic. WAF needs rules set up.

Taryn 1 month ago

I feel like AWS Shield is more focused on attacks. WAF is for filtering.

Thersa 2 months ago

I agree, but D) AWS WAF also sounds good for web app security.

Emerson 2 months ago

I think it's C) AWS Shield Standard. It’s designed for DDoS protection.

Talia 2 months ago

I feel confident about choosing Shield Standard for exams.

Caprice 2 months ago

Good point! Both have their strengths.

Elden 2 months ago

True, but Shield Standard is automatic. Less hassle.

Ashton 2 months ago

I’m leaning towards AWS WAF. It’s more customizable.

Deandrea 3 months ago

Yes, but WAF helps with specific HTTP requests.

Talia 3 months ago

AWS Shield Standard is more focused on attacks, right?

Barrett 3 months ago

I agree, but AWS WAF also sounds good for web apps.

Caprice 3 months ago

I think it's AWS Shield Standard. It’s designed for DDoS protection.

Carey 3 months ago

Not convinced, are these really enough for serious attacks?

Stephanie 3 months ago

Pretty sure it's C) Shield Standard, but WAF is good for custom rules.

Ty 4 months ago

Wait, I thought Security groups handled that too?

Dorothy 4 months ago

I think D) AWS WAF is more comprehensive though.

Novella 4 months ago

Definitely C) AWS Shield Standard for basic protection.

Mike 4 months ago

I recall that AWS Shield is for DDoS protection, but I wonder if AWS WAF is also a valid choice for HTTP attacks specifically.

Dana 6 months ago

I feel like Security groups and Network ACLs are more about controlling access rather than directly protecting against HTTP attacks.

Merlyn 6 months ago

I'm not entirely sure, but I remember practicing a question about web application security, and AWS WAF seemed relevant for that.

Yvonne 6 months ago

I think AWS Shield Standard might be the right answer since it specifically mentions protection against DDoS attacks.

Amazon CLF-C02 Exam - Topic 3 Question 57 Discussion