SAA-C03 Q530 · Networking

Question

A company is building a web application. The company needs a load balancing solution that supports HTTPS header-based routing. The company's security team also requires a rules-based method of blocking specific incoming requests to decrease the effects of malicious activity. Which solution will meet these requirements?

Accepted Answer

This question has two distinct requirements:

**Requirement 1: HTTPS header-based routing**
- Application Load Balancer (ALB) operates at Layer 7 (HTTP/HTTPS) and natively supports **host header**, **path**, **HTTP header**, **HTTP method**, **query string**, and **source IP** based routing rules.
- ALB is the only AWS load balancer that supports HTTP header-based routing.

**Requirement 2: Rules-based blocking of malicious requests**
- **AWS WAF (Web Application Firewall)** is purpose-built for this. It allows you to create **Web ACLs** with rules that inspect incoming HTTP/HTTPS requests and block, allow, or count them based on conditions like IP addresses, HTTP headers, URI strings, SQL injection patterns, cross-site scripting (XSS), rate limits, and geo-location.
- AWS WAF integrates d

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips