Q62 — AWS SAA-C03 第2章

第 62/65 题 | ← 返回第2章

Q127.一家公司通过 Amazon CloudFront 为应用程序提供服务.该公司希望保护应用程序免受常见的 SQL 注入和跨站点脚本攻击.该公司还希望能够阻止 IP 地址和应用速率限制.哪个 AWS 服务满足这些要求?

正确答案: D. AWS WAF

解析

AWS WAF is a web application firewall that helps to protect web applications from common web exploits such as SQL injection and cross-site scripting (XSS) attacks. It also provides the ability to block IP addresses and apply rate limiting based on configurable rules. Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior in AWS accounts and workloads. AWS Shield is a managed DDoS protection service that safeguards web applications running on AWS. Amazon Inspector is an automated security assessment service that helps to improve the security and compliance of applications deployed on AWS.AWS WAF是一款web应用程序防火墙，可帮助保护web应用程序免受SQL注入和跨站脚本(XSS)攻击等常见web漏洞的攻击。它还提供了阻止IP地址和基于可配置规则应用速率限制的能力。 Amazon GuardDuty是一项威胁检测服务，可持续监控AWS账户和工作负载中的恶意活动和未经授权的行为。 AWS Shield是一款托管式DDoS防护服务，可保护在AWS上运行的web应用程序。 Amazon Inspector是一项自动安全评估服务，可帮助提高部署在AWS上的应用程序的安全性和合规性。