Alibaba Cloud Certified Associate – Cloud Computing — Question 7

You built an online shop using Alibaba Cloud services (ECS, RDS, `¦etc.) and very soon you'll have a campaign that every customer that invites 3 friends will get a 50% off coupon. To avoid HTTP flood attacks and ensure only genuine customers (not bots) joining the event, which security product should you choose?

Answer options

• A. Anti-DDoS Basic
• B. Anti-DDoS pro
• C. WAF
• D. Server Guard

Correct answer: C

Explanation

The correct answer is WAF (Web Application Firewall) because it is specifically designed to protect web applications from a variety of attacks, including HTTP flood attacks. Anti-DDoS Basic and Pro focus on larger-scale DDoS attacks, which may not address the specific needs of preventing bot traffic, while Server Guard provides host-level protection but does not specifically target web application vulnerabilities.