SAP-C02 Question 181

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  AWS WAF’s managed SQL injection rule group automatically blocks SQL injection attacks while allowing legitimate traffic, with low operational overhead. A only monitors, no blocking. B focuses on bots, not SQLi. D is manual and high-maintenance.

• Chose C1

  Option C

• Chose C1

  C 100%

• 11

  C. Yes, because The SQL database rule group contains rules to block request patterns associated with exploitation of SQL databases, like SQL injection attacks. This can help prevent remote injection of unauthorized queries. Evaluate this rule group for use if your application interfaces with an SQL database. https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-use-case.html A. No, because this does not prevent SQL injection attacks from reaching the ECS API service B. No, because with Bot Control, you can easily monitor, block, or rate limit bots such as scrapers, scanners, crawlers, status monitors, and search engines. https://docs.aws.amazon.com/waf/latest/developerguide/waf-bot-control.html D. No, because because this is a reactive response after a SQL injection attack has occurred for new IP addresses