SAP-C02 Exam QuestionsBrowse all questions from this exam
Go to Exam

SAP-C02 Exam - Question 487

A company hosts its primary API on AWS by using an Amazon API Gateway API and AWS Lambda functions that contain the logic for the API methods. The company’s internal applications use the API for core functionality and business logic. The company’s customers use the API to access data from their accounts. Several customers also have access to a legacy API that is running on a single standalone Amazon EC2 instance.

The company wants to increase the security for these APIs to better prevent denial of service (DoS) attacks, check for vulnerabilities, and guard against common exploits.

What should a solutions architect do to meet these requirements?

Show Answer
Correct Answer: C

To increase security, use AWS WAF to protect the Amazon API Gateway API as it helps to prevent denial of service (DoS) attacks and common exploits. Configure Amazon Inspector to analyze the legacy API running on an EC2 instance to check for vulnerabilities. Finally, use Amazon GuardDuty to monitor for malicious attempts to access both the APIs, as GuardDuty is designed to continuously monitor and analyze for potential threats.

Discussion

5 comments
Sign in to comment
ebbff63Option: C
Jun 27, 2024

GuardDuty only monitors but doesn't block malicious attempts. So answer is C

mifuneOption: A
Jun 27, 2024

"The company wants to increase the security for these APIs to better prevent denial of service (DoS) attacks, check for vulnerabilities, and guard against common exploits.", so I understand that we have to protect BOTH, and GuardDuty does not block anything... The answer for me is A

toma
Jun 30, 2024

how are you going to attache WAF to ec2? :)

HelpnosenseOption: C
Jun 30, 2024

Not A because the question only say "Several customers also have access to a legacy API that is running on a single standalone Amazon EC2 instance." There is no ALB or cloudfront mentioned so WAF can't be attached to EC2 directly.

zapper1234
Jun 25, 2024

B becuase this protects both API's

gfhbox0083
Jul 5, 2024

C, for sure. AWS GuardDuty is a monitoring and threat detection service and does not directly block malicious activities. GuardDuty is designed to continuously monitor and analyze your AWS accounts and workloads for potential threats using machine learning, anomaly detection, and integrated threat intelligence.