A Web Application Is Deployed in the AWS Cloud

Multiple Choice

A web application is deployed in the AWS Cloud. It consists of a two-tier architecture that includes a web layer and a database layer. The web server is vulnerable to cross-site scripting (XSS) attacks. What should a solutions architect do to remediate the vulnerability?

A) Create a Classic Load Balancer. Put the web layer behind the load balancer and enable AWS WAF.
B) Create a Network Load Balancer. Put the web layer behind the load balancer and enable AWS WAF.
C) Create an Application Load Balancer. Put the web layer behind the load balancer and enable AWS WAF.
D) Create an Application Load Balancer. Put the web layer behind the load balancer and use AWS Shield Standard.