A solutions architect is designing a web application that will run on Amazon EC2 instances behind an Application Load Balancer (ALB). The company strictly requires that the application be resilient against malicious internet activity and attacks, and protect against new common vulnerabilities and exposures.
What should the solutions architect recommend?
A . Leverage Amazon CloudFront with the ALB endpoint as the origin .
B . Deploy an appropriate managed rule for AWS WAF and associate it with the AL
D . Subscribe to AWS Shield Advanced and ensure common vulnerabilities and exposures are blocked.
E . Configure network ACLs and security groups to allow only ports 80 and 443 to access the EC2 instances.
Answer: B
Explanation:
My answer here was C not A as I can see above .
the right answer can be either shield advanced or WAF . Basically shield advanced have WAF included . But it costs more cause it has also automatic remediation . so right answer according to cost is B
Latest SAA-C02 Dumps Valid Version with 230 Q&As
Latest And Valid Q&A | Instant Download | Once Fail, Full Refund