The correct option is Runtime Application Self Protection.

Runtime Application Self Protection instruments the application while it runs to monitor inputs and internal behavior so it can detect active attacks as they occur and take immediate action to block or mitigate them. It operates in process and has full context about application state and user sessions so it can perform actions such as blocking malicious requests terminating sessions or capturing detailed forensic data in real time.

Software Composition Analysis focuses on identifying known vulnerable open source components and license issues in the codebase and it does not provide in process detection or active runtime blocking of attacks.

Dynamic Application Security Testing performs external testing against a running application to find vulnerabilities and it acts as an external scanner so it cannot act from inside the application to immediately stop an attack in production.

Static Application Security Testing analyzes source code or binaries offline to find coding flaws during development and it cannot detect or react to live attacks while the application runs.

Full AWS Practitioner Certification Question