Examkin

Soru

Zorluk: KolayEdge and DDoS Protection

A retail company hosts a web application on AWS. The solutions architect needs to configure a security solution that blocks malicious SQL injection payloads in incoming HTTP requests before they reach the backend application. Which AWS service should the solutions architect deploy to meet this requirement?

  1. AWS WAFCevap
  2. B
    AWS Shield Standard
  3. C
    Network Access Control Lists (NACLs)
  4. D
    Security Groups

Cevap

AWS WAF
AWS WAF (Web Application Firewall) operates at the application layer (Layer 7) and allows you to monitor HTTP and HTTPS requests that are forwarded to protected resources, such as an Application Load Balancer or Amazon CloudFront. It includes built-in managed rules to detect and block common exploits, including SQL injection payloads, before they reach backend servers.

Adım Adım Çözüm

1
Identify the target layer of the threat.
The threat is SQL injection, which occurs at the application layer (Layer 7) of the OSI model.
Security controls must be chosen based on the network layer they operate on.
2
Evaluate the capabilities of the proposed services.
Only AWS WAF operates at Layer 7 and is capable of inspecting HTTP/HTTPS payloads to block SQL injection patterns.
Layer 3/4 controls like Shield Standard, Network ACLs, and Security Groups do not have visibility into HTTP payload contents.

Anahtar Kavram

AWS WAF protects applications at the application layer (Layer 7) from web exploits like SQL injection, whereas AWS Shield Standard and VPC security controls operate at lower layers (Layer 3/4) to mitigate network-level attacks.
Tahmini Süre:45s
Bu soruyu puanla

Konular

Edge and DDoS Protection

Bu konudan daha fazla soru