AWS Certified Cloud Practitioner (CLF-C02) — Question 92

A company wants to block SQL injection attacks.
Which AWS service or feature should the company use to meet this requirement?

Answer options

• A. AWS WAF
• B. Network ACLs
• C. Security groups
• D. AWS Certificate Manager (ACM)

Correct answer: A

Explanation

AWS WAF is designed specifically to protect web applications from common attacks, including SQL injection, by allowing users to create rules that block such threats. Network ACLs and security groups are focused on controlling network traffic rather than application-layer attacks, and AWS Certificate Manager (ACM) is used for managing SSL/TLS certificates, which does not directly address SQL injection vulnerabilities.