AWS Certified Advanced Networking - Specialty ANS-C01 — Topic 1 Question 210

Question

A company has an internal web-based application that employees use. The company hosts the application over a VPN in the company’s on-premises network. The application runs on a fleet of Amazon EC2 instances in a private subnet behind a Network Load Balancer (NLB) in the same subnet. The instances are in an Amazon EC2 Auto Scaling group. During a recent security incident, SQL injection occurred on the application. A network engineer must implement a solution to prevent SQL injection attacks in the future. Which combination of steps will meet these requirements? (Choose three.)

Accepted Answer

Correct answer: A, C, E. The correct answer is A, C, E. Option A: Create an AWS WAF web ACL that includes rules to block SQL injection attacks. Option C: Replace the NLB with an Application Load Balancer. Option E: Associate the AWS WAF web ACL with the Application Load Balancer. An Application Load Balancer distributes HTTP/HTTPS traffic and supports path/host routing. A load balancer distributes traffic across targets in multiple AZs for availability and scale. AWS WAF protects web applications from common exploits and malicious requests.

AWS Certified Advanced Networking - Specialty ANS-C01 — Question 210