The Security Engineer Is Managing a Web Application That Processes

question 3

Multiple Choice

The Security Engineer is managing a web application that processes highly sensitive personal information. The application runs on Amazon EC2. The application has strict compliance requirements, which instruct that all incoming traffic to the application is protected from common web exploits and that all outgoing traffic from the EC2 instances is restricted to specific whitelisted URLs. Which architecture should the Security Engineer use to meet these requirements?

• A) Use AWS Shield to scan inbound traffic for web exploits. Use VPC Flow Logs and AWS Lambda to restrict egress traffic to specific whitelisted URLs.
• B) Use AWS Shield to scan inbound traffic for web exploits. Use a third-party AWS Marketplace solution to restrict egress traffic to specific whitelisted URLs.
• C) Use AWS WAF to scan inbound traffic for web exploits. Use VPC Flow Logs and AWS Lambda to restrict egress traffic to specific whitelisted URLs.
• D) Use AWS WAF to scan inbound traffic for web exploits. Use a third-party AWS Marketplace solution to restrict egress traffic to specific whitelisted URLs.

---

Definitions:

Group Harmony

The state of agreement, accord, or unity within a group of individuals, often seen as a goal in many collective cultures.

Socioemotional Competence

The ability to understand, manage, and express the social and emotional aspects of one's life.

Self-regulatory Strategies

Techniques or methods used by individuals to control their thoughts, emotions, and actions towards achieving personal goals.

Social Relationships

Connections between individuals defined by emotions, dependency, interactions, and social networking, which contribute to forming societies.