For IndividualsFor Educators
ExpertMinds LogoExpertMinds
ExpertMinds

Ace your certifications with Practice Exams and AI assistance.

  • Browse Exams
  • For Educators
  • Blog
  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Support
  • AWS SAA Exam Prep
  • PMI PMP Exam Prep
  • CPA Exam Prep
  • GCP PCA Exam Prep

© 2026 TinyHive Labs. Company number 16262776.

    PracticeAWS Solutions Architect Professional (SAP-C02)AWS Solutions Architect Professional SAP-C02 Practice Exam 3Question 34
    Medium1 markMultiple Choice
    Domain 2.3: Security ControlsSecurityWAFCloudFront

    AWS SAP-C02 · Question 34 · Domain 2.3: Security Controls

    A web application is deployed across multiple AWS Regions. The security team wants to protect the application from SQL injection and cross-site scripting (XSS) attacks globally using a single set of rules. Which architecture is MOST appropriate?

    Answer options:

    A.

    Deploy AWS WAF on Regional Application Load Balancers.

    B.

    Deploy AWS WAF on Amazon CloudFront.

    C.

    Use AWS Network Firewall in each region.

    D.

    Use Amazon GuardDuty to block malicious IPs.

    How to approach this question

    Identify the global deployment option for Layer 7 protection.

    Full Answer

    B.Deploy AWS WAF on Amazon CloudFront.✓ Correct
    Deploying AWS WAF on Amazon CloudFront allows you to manage a single global web ACL that protects all regional endpoints.

    Common mistakes

    Deploying WAF on regional ALBs, which increases management overhead.
    Question 33All questionsQuestion 35

    Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 3

    75 questions · hints · full answers · grading

    Sign up freeTake the exam

    More questions from this exam

    Q01An enterprise has 100 VPCs across 5 AWS Regions. They need to establish a highly available, trans...HardQ02A company uses AWS Organizations. The CISO requires that no EC2 instances can be launched outside...MediumQ03An application uses Amazon Aurora PostgreSQL. To meet disaster recovery requirements, the databas...HardQ04A company is setting up a new multi-account AWS environment. They want to automate the creation o...MediumQ05An organization wants to allocate AWS costs to specific departments. They use multiple AWS accoun...Medium
    View all 75 questions →