The Security Engineer Is Managing a Web Application That Processes

question 3

Multiple Choice

The Security Engineer is managing a web application that processes highly sensitive personal information. The application runs on Amazon EC2. The application has strict compliance requirements, which instruct that all incoming traffic to the application is protected from common web exploits and that all outgoing traffic from the EC2 instances is restricted to specific whitelisted URLs. Which architecture should the Security Engineer use to meet these requirements?

• A) Use AWS Shield to scan inbound traffic for web exploits. Use VPC Flow Logs and AWS Lambda to restrict egress traffic to specific whitelisted URLs.
• B) Use AWS Shield to scan inbound traffic for web exploits. Use a third-party AWS Marketplace solution to restrict egress traffic to specific whitelisted URLs.
• C) Use AWS WAF to scan inbound traffic for web exploits. Use VPC Flow Logs and AWS Lambda to restrict egress traffic to specific whitelisted URLs.
• D) Use AWS WAF to scan inbound traffic for web exploits. Use a third-party AWS Marketplace solution to restrict egress traffic to specific whitelisted URLs.

---

Definitions:

Real Interest Rate

The interest rate expressed in dollars of constant purchasing power as a percentage of the amount loaned; the nominal interest rate minus the inflation rate.

Hidden Unemployment

Unemployment that includes individuals who have stopped looking for work or those who are underemployed, not fully reflected in official unemployment statistics.

Unemployment Compensation

Financial payments made to individuals who have lost their job until they find new employment, typically administered by government agencies.

Part Time

Employment with fewer hours per week compared to full-time jobs, often offering less benefits and lower pay.