A Security Engineer Must Add Additional Protection to a Legacy

question 272

Multiple Choice

A Security Engineer must add additional protection to a legacy web application by adding the following HTTP security headers: -Content Security-Policy -X-Frame-Options -X-XSS-Protection The Engineer does not have access to the source code of the legacy web application. Which of the following approaches would meet this requirement?

• A) Configure an Amazon Route 53 routing policy to send all web traffic that does not include the required headers to a black hole.
• B) Implement an AWS Lambda@Edge origin response function that inserts the required headers.
• C) Migrate the legacy application to an Amazon S3 static website and front it with an Amazon CloudFront distribution.
• D) Construct an AWS WAF rule to replace existing HTTP headers with the required security headers by using regular expressions.

---

Definitions:

Relevant Benefits

The advantageous outcomes or gains that are directly attributable to a specific action or investment.

Relevant Costs

Costs that are directly affected by a specific business decision and should be considered when making that decision.

Fixed Costs Per Unit

The fixed costs associated with a product divided by the number of units produced, highlighting how these costs dilute with increased production.

Joint Products

A scenario in production where a single process yields multiple products simultaneously.