Exit SCS-C03 AWS Certified Security - Specialty
Question 4 of 5
0% complete
Q4 Single choice

A company runs an application on a fleet of Amazon EC2 instances. The application is accessible to users around the world. The company associates an AWS WAF web ACL with an Application Load Balancer

(ALB) that routes traffic to the EC2 instances. A security engineer is investigating a sudden increase in traffic to the application. The security engineer discovers a significant amount of potentially malicious requests coming from hundreds of IP addresses in two countries. The security engineer wants to quickly limit the potentially malicious requests but does not want to prevent legitimate users from accessing the application.

Which solution will meet these requirements?

  • A

    Use AWS WAF to implement a rate-based rule for all incoming requests.

  • B

    Use AWS WAF to implement a geographical match rule to block all incoming traffic from the two countries.

  • C

    Edit the ALB security group to include a geographical match rule to block all incoming traffic from the two countries.

  • D

    Add deny rules to the ALB security group that prohibit incoming requests from the IP addresses.

Previous Next