Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 340 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C03

Question #: 340
Topic #: 1

[All AWS Certified Solutions Architect - Associate SAA-C03 Questions]

A media company hosts its website on AWS. The website application’s architecture includes a fleet of Amazon EC2 instances behind an Application Load Balancer (ALB) and a database that is hosted on Amazon Aurora. The company’s cybersecurity team reports that the application is vulnerable to SQL injection.

How should the company resolve this issue?

A. Use AWS WAF in front of the ALB. Associate the appropriate web ACLs with AWS WAF.
B. Create an ALB listener rule to reply to SQL injections with a fixed response.
C. Subscribe to AWS Shield Advanced to block all SQL injection attempts automatically.
D. Set up Amazon Inspector to block all SQL injection attempts automatically.

Show Suggested Answer

Suggested Answer: A 🗳️

by Bhawesh at Feb. 17, 2023, 9 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

Bhawesh

Highly Voted 1 year, 6 months ago

Selected Answer: A

A. Use AWS WAF in front of the ALB. Associate the appropriate web ACLs with AWS WAF. SQL Injection - AWS WAF DDoS - AWS Shield

upvoted 24 times

...

jennyka76

Highly Voted 1 year, 6 months ago

Answer - A https://aws.amazon.com/premiumsupport/knowledge-center/waf-block-common-attacks/#:~:text=To%20protect%20your%20applications%20against,%2C%20query%20string%2C%20or%20URI. ----------------------------------------------------------------------------------------------------------------------- Protect against SQL injection and cross-site scripting To protect your applications against SQL injection and cross-site scripting (XSS) attacks, use the built-in SQL injection and cross-site scripting engines. Remember that attacks can be performed on different parts of the HTTP request, such as the HTTP header, query string, or URI. Configure the AWS WAF rules to inspect different parts of the HTTP request against the built-in mitigation engines.

upvoted 8 times

...

1 year, 5 months ago

Answer C - Shield Advanced (WAF + Firewall Manager)

upvoted 1 times

...

fkie4

1 year, 5 months ago

Selected Answer: A

It is A. I am happy to see Amazon gives out score like this...

upvoted 2 times

...

LuckyAro

1 year, 5 months ago

Selected Answer: A

AWS WAF is a managed service that protects web applications from common web exploits that could affect application availability, compromise security, or consume excessive resources. AWS WAF enables customers to create custom rules that block common attack patterns, such as SQL injection attacks. By using AWS WAF in front of the ALB and associating the appropriate web ACLs with AWS WAF, the company can protect its website application from SQL injection attacks. AWS WAF will inspect incoming traffic to the website application and block requests that match the defined SQL injection patterns in the web ACLs. This will help to prevent SQL injection attacks from reaching the application, thereby improving the overall security posture of the application.

upvoted 3 times

LuckyAro

1 year, 5 months ago

B, C, and D are not the best solutions for this issue. Replying to SQL injections with a fixed response (B) is not a recommended approach as it does not actually fix the vulnerability, but only masks the issue. Subscribing to AWS Shield Advanced (C) is useful to protect against DDoS attacks but does not protect against SQL injection vulnerabilities. Amazon Inspector (D) is a vulnerability assessment tool and can identify vulnerabilities but cannot block attacks in real-time.

upvoted 3 times

...

pbpally

1 year, 6 months ago

Selected Answer: A

Bhawesh answers it perfect so I'm avoiding redundancy but agree on it being A.

upvoted 2 times

...