SAA-C03 Q78 · Security

Question

A solutions architect is designing a web application that will run on Amazon EC2 instances behind an Application Load Balancer (ALB). The company strictly requires that the application be resilient against malicious internet activity and attacks, and protect against new common vulnerabilities and exposures. What should the solutions architect recommend?

Accepted Answer

**Option B: Deploy an appropriate managed rule for AWS WAF and associate it with the ALB.**

Let's break down the two key requirements:

1. **Resilient against malicious internet activity and attacks** → AWS WAF is a web application firewall specifically designed to filter malicious HTTP/HTTPS traffic. It inspects requests at Layer 7 and can block SQL injection, cross-site scripting (XSS), and other application-layer attacks.

2. **Protect against new common vulnerabilities and exposures (CVEs)** → This is the critical differentiator. AWS WAF **Managed Rules** are pre-configured rule groups maintained by AWS and AWS Marketplace sellers. The **AWS Managed Rules for AWS WAF** include rule groups like:
   - **AWSManagedRulesKnownBadInputsRuleSet** — blocks request patterns associated with exp

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips