AWS Certified Cloud Practitioner (CLF-C02) — Question 405

A company is hosting a web application on Amazon EC2 instances. The company wants to implement custom conditions to filter and control inbound web traffic.

Which AWS service will meet these requirements?

Answer options

• A. Amazon GuardDuty
• B. AWS WAF
• C. Amazon Macie
• D. AWS Shield

Correct answer: B

Explanation

AWS WAF allows users to monitor web requests and create custom security rules to filter and control inbound web traffic based on criteria such as IP addresses or HTTP headers. Amazon GuardDuty is a threat detection service rather than a traffic filter, Amazon Macie is used for sensitive data discovery, and AWS Shield is dedicated to DDoS protection.