Amazon SAA-C03 Exam - Topic 6 Question 12 Discussion

Actual exam question for Amazon's SAA-C03 exam

Question #: 12
Topic #: 6

A company has deployed its application on Amazon EC2 instances with an Amazon RDS database. The company used the principle of least privilege to configure the database access credentials. The company's security team wants to protect the application and the database from SQL injection and other web-based attacks.

Which solution will meet these requirements with the LEAST operational overhead?

AUse security groups and network ACLs to secure the database and application servers.

BUse AWS WAF to protect the application. Use RDS parameter groups to configure the security settings.

CUse AWS Network Firewall to protect the application and the database.

DUse different database accounts in the application code for different functions. Avoid granting excessive privileges to the database users.

Show Suggested Answer

Suggested Answer: D

by Tyra at Jan 11, 2023, 01:58 AM

Limited Time Offer

25%

Off

Get Premium SAA-C03 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lachelle

5 months ago

I like D for least privilege, but it might add overhead.

upvoted 0 times

...

Tarra

6 months ago

Option A is too basic for modern threats.

upvoted 0 times

...

Scot

6 months ago

Not sure about that, isn't WAF a bit complex to set up?

upvoted 0 times

...

Antione

6 months ago

Totally agree, AWS WAF is super effective!

upvoted 0 times

...

Doug

6 months ago

I think option B is the best choice for web protection.

upvoted 0 times

...

Rosita

6 months ago

I feel like using different database accounts is a good practice, but it might not directly address SQL injection as effectively as WAF would.

upvoted 0 times

...

Weldon

6 months ago

I practiced a similar question where using AWS WAF was the best option for minimizing operational overhead. I think it might apply here too.

upvoted 0 times

...

Berry

6 months ago

I'm not entirely sure, but I think using security groups alone might not be enough to protect against web-based attacks.

upvoted 0 times

...

Colby

7 months ago

I remember studying about AWS WAF and how it can help prevent SQL injection attacks. It seems like a solid choice for this scenario.

upvoted 0 times

...

Viva

7 months ago

This is a tricky one. I'm leaning towards JMeter, but I want to make sure I understand how to properly configure it for an SAP landscape. I'll need to review the documentation carefully.

upvoted 0 times

...

Jesusa

7 months ago

Hmm, this seems like a complex scenario with a lot of moving parts. I'll need to carefully read through the details and think about how to balance the different metrics.

upvoted 0 times

...

Lili

7 months ago

I'm not entirely sure, but I recall practicing questions about NDE methods and their importance in inspections. Could that relate to mitigating CUI?

upvoted 0 times

...

Tresa

7 months ago

SPAN doesn't seem like the right choice for this question, but I can't completely remember what it does in this context.

upvoted 0 times

...

Derrick

11 months ago

Option E: Just turn off the database and hope no one notices. Zero overhead, guaranteed!

upvoted 0 times

...

Cordelia

11 months ago

D all the way, baby! Gotta keep those database creds on lockdown. Although, I did hear a rumor that AWS has a new service called 'AWS Password Manager' - maybe that'll make things even easier.

upvoted 0 times