Topic 1 Question 30
A company is hosting a web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The application has become the target of a DoS attack. Application logging shows that requests are coming from a small number of client IP addresses, but the addresses change regularly. The company needs to block the malicious traffic with a solution that requires the least amount of ongoing effort. Which solution meets these requirements?
Create an AWS WAF rate-based rule, and attach it to the ALB.
Update the security group that is attached to the ALB to block the attacking IP addresses.
Update the ALB subnet's network ACL to block the attacking client IP addresses.
Create an AWS WAF rate-based rule, and attach it to the security group of the EC2 instances.
ユーザの投票
コメント(8)
- 正解だと思う選択肢: A
AWS WAF can be deployed on Amazon CloudFront, the Application Load Balancer (ALB), Amazon API Gateway, and AWS AppSync.
👍 5Daniel762023/11/29 - 正解だと思う選択肢: A👍 4100fold2023/10/19
What's that mean "a small number of client IP addresses, but the addresses change regularly.": v if small number, why not use C =)) i thing this question not exactlty, "small" is redundant words ?
👍 2Sodev2024/04/04
シャッフルモード