AWS WAF and Shield Advanced Quiz

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Security Controls

What you'll be asked

  1. Which AWS service is primarily used to protect web applications from common web exploits like SQL injection and Cross-Site Scripting (XSS)?
  2. A company wants to protect their application against Layer 7 DDoS attacks and receive 24/7 access to the AWS DDoS Response Team (DRT). Which service level should they choose?
  3. You are tasked with managing security policies across hundreds of AWS accounts in an organization. Which service should you use to centrally deploy and manage AWS WAF rules?
  4. When configuring an AWS WAF Web ACL, what happens if a request does not match any of the defined rules and the default action is set to 'Block'?
  5. You have an AWS WAF Web ACL associated with an Amazon CloudFront distribution. You notice that legitimate users are being blocked because of a rate-based rule. Which specific configuration change would best address this while maintaining protection against high-volume traffic?

Answers and explanations come after you submit.