Topic 1 Question 961
A company uses AWS to host its public ecommerce website. The website uses an AWS Global Accelerator accelerator for traffic from the internet. The Global Accelerator accelerator forwards the traffic to an Application Load Balancer (ALB) that is the entry point for an Auto Scaling group.
The company recently identified a DDoS attack on the website. The company needs a solution to mitigate future attacks.
Which solution will meet these requirements with the LEAST implementation effort?
Configure an AWS WAF web ACL for the Global Accelerator accelerator to block traffic by using rate-based rules
Configure an AWS Lambda function to read the ALB metrics to block attacks by updating a VPC network ACL
Configure an AWS WAF web ACL on the ALB to block traffic by using rate-based rules
Configure an Amazon CloudFront distribution in front of the Global Accelerator accelerator
ユーザの投票
コメント(8)
- 正解だと思う選択肢: C
C as AWS WAF cannot be used directly on global accelerator
👍 9[Removed]2024/08/19 - 正解だと思う選択肢: C
Answer is C. Note: AWS Global Accelerator itself doesn't support AWS WAF.
https://repost.aws/knowledge-center/globalaccelerator-aws-waf-filter-layer7-traffic
👍 5sOI852POL2024/09/08 - 正解だと思う選択肢: C
WAF can be applied on ALB, API gateway or cloud front.
👍 5rpmaws2024/09/14
シャッフルモード