Exam AWS Certified Solutions Architect - Professional topic 1 question 912 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Professional

Question #: 912
Topic #: 1

[All AWS Certified Solutions Architect - Professional Questions]

A company hosts its primary API on AWS by using an Amazon API Gateway API and AWS Lambda functions that contain the logic for the API methods. The company's internal applications use the API for core functionality and business logic. The company's customers use the API to access data from their accounts.
Several customers also have access to a legacy API that is running on a single standalone Amazon EC2 instance.
The company wants to increase the security for these APIs to better prevent denial of service (DoS) attacks, check for vulnerabilities, and guard against common exploits.
What should a solutions architect do to meet these requirements?

A. Use AWS WAF to protect both APIs. Configure Amazon Inspector to analyze the legacy API. Configure Amazon GuardDuty to monitor for malicious attempts to access the APIs.
B. Use AWS WAF to protect the API Gateway API. Configure Amazon Inspector to analyze both APIs. Configure Amazon GuardDuty to block malicious attempts to access the APIs.
C. Use AWS WAF to protect the API Gateway API. Configure Amazon Inspector to analyze the legacy API. Configure Amazon GuardDuty to monitor for malicious attempts to access the APIs.
D. Use AWS WAF to protect the API Gateway API. Configure Amazon Inspector to protect the legacy API. Configure Amazon GuardDuty to block malicious attempts to access the APIs.

Show Suggested Answer

Suggested Answer: C 🗳️

by Rocketeer at Sept. 3, 2022, 9:36 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

AwsBRFan

Highly Voted 2 years, 7 months ago

Selected Answer: C

Agree C - Single EC2 instance, so legacy API does not apply WAF (WAF for ALB, API gateway, cloudfront)

upvoted 7 times

...

Pete987

Most Recent 2 years, 1 month ago

Can it not be B? Lamba scanning using Inspector is in the preview stage though AWS Documentation: Amazon Inspector support for AWS Lambda functions provides continuous, automated security vulnerability assessments for Lambda functions and layers. Amazon Inspector offers two types of scanning for Lambda. These scan types look for different types of vulnerabilities. Amazon Inspector Lambda standard scanning This is the default Lambda scan type. Lambda standard scanning scans application dependencies within a Lambda function and its layers for package vulnerabilities. Amazon Inspector Lambda code scanning This scan type scans the custom application code in your functions and layers for code vulnerabilities. You can either activate Lambda standard scanning or activate Lambda standard scanning together with Lambda code scanning

upvoted 1 times

...