MENU
A company has deployed its application on Amazon EC2 instances with an Amazon RDS database. The company used the principle of least privilege to configure the database access credentials. The company's security team wants to protect the application and the database from SQL injection and other web-based attacks.
Which solution will meet these requirements with the LEAST operational overhead?
Suggested Answer: D
Get Premium SAA-C03 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
28 comments · newest first
LA
Lachelle
11 months ago
I like D for least privilege, but it might add overhead.
TA
Tarra
12 months ago
Option A is too basic for modern threats.
SC
Scot
12 months ago
Not sure about that, isn't WAF a bit complex to set up?
AN
Antione
1 year ago
Totally agree, AWS WAF is super effective!
DO
Doug
1 year ago
I think option B is the best choice for web protection.
RO
Rosita
1 year ago
I feel like using different database accounts is a good practice, but it might not directly address SQL injection as effectively as WAF would.
WE
Weldon
1 year ago
I practiced a similar question where using AWS WAF was the best option for minimizing operational overhead. I think it might apply here too.
BE
Berry
1 year ago
I'm not entirely sure, but I think using security groups alone might not be enough to protect against web-based attacks.
CO
Colby
1 year ago
I remember studying about AWS WAF and how it can help prevent SQL injection attacks. It seems like a solid choice for this scenario.
VI
Viva
1 year ago
This is a tricky one. I'm leaning towards JMeter, but I want to make sure I understand how to properly configure it for an SAP landscape. I'll need to review the documentation carefully.
JE
Jesusa
1 year ago
Hmm, this seems like a complex scenario with a lot of moving parts. I'll need to carefully read through the details and think about how to balance the different metrics.
LI
Lili
1 year ago
I'm not entirely sure, but I recall practicing questions about NDE methods and their importance in inspections. Could that relate to mitigating CUI?
TR
Tresa
1 year ago
SPAN doesn't seem like the right choice for this question, but I can't completely remember what it does in this context.
DE
Derrick
1 year ago
Option E: Just turn off the database and hope no one notices. Zero overhead, guaranteed!
CO
Cordelia
1 year ago
D all the way, baby! Gotta keep those database creds on lockdown. Although, I did hear a rumor that AWS has a new service called 'AWS Password Manager' - maybe that'll make things even easier.
RO
Rosalia
1 year ago
Option C: Enable Amazon RDS encryption at rest and in transit
TR
Trinidad
1 year ago
Option B: Implement AWS Shield for DDoS protection
VE
Veronika
1 year ago
Option A: Use AWS WAF to filter and monitor web traffic
MA
Marguerita
1 year ago
Hmm, I'm torn between B and D. AWS WAF is pretty nifty, but I think D gives you a bit more control and flexibility. Decisions, decisions...
RO
Robt
1 year ago
I'm with Bev on this one. D is the clear winner. Anything that reduces operational overhead is a plus in my book.
BE
Bev
1 year ago
Option D is the way to go! Least privilege and separation of concerns - that's the AWS security gold standard right there.
CH
Chu
1 year ago
Absolutely, AWS security gold standard for the win!
MA
Marva
1 year ago
It's important to protect against SQL injection and other web-based attacks.
CE
Cecily
1 year ago
I agree, least privilege and separation of concerns are key.
LO
Lou
1 year ago
Option D is definitely the best choice for security.
GL
Gladys
2 years ago
I prefer option D. Using different database accounts for different functions can help minimize the risk of SQL injection.
AM
Ammie
2 years ago
I agree with Dorothy. Using RDS parameter groups to configure security settings is also a good idea.
DO
Dorothy
2 years ago
I think option B is the best choice. AWS WAF can help protect the application from web-based attacks.