Question
A network security engineer must secure a web application running on virtual machines in a public cloud. The virtual machines are behind an application load balancer. Which of the following technologies should the engineer use to secure the virtual machines? (Choose two.)
- A. CDN
- B. DLP
- C. IDS
- D. WAF Correct
- E. SIEM
- F. NSG Correct
Explanation
A web application firewall inspects HTTP/HTTPS traffic in front of the application and blocks attacks such as SQL injection and cross-site scripting, and it is typically attached to the application load balancer. A network security group filters traffic at the virtual machine or subnet level so that only the load balancer and required management sources can reach the VMs. A CDN improves content delivery, DLP protects data from leaving the organization, an IDS only detects without blocking, and a SIEM aggregates and correlates logs rather than protecting the VMs directly.
