QuestionQ87

Content Domain 2: Security and Compliance

A company wants to monitor and block malicious HTTP and HTTPS requests that its Amazon CloudFront distributions receive.

Which AWS service should the company use to meet these requirements?

  • A Amazon GuardDuty
  • B Amazon Inspector
  • C AWS WAF
  • D Amazon Detective
Explanation

AWS WAF (Web Application Firewall) monitors and blocks malicious HTTP and HTTPS requests at the application layer. It can be integrated with CloudFront to protect web applications. GuardDuty detects account threats, Inspector finds vulnerabilities, and Detective investigates security issues—none provide real-time HTTP request filtering.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!