Topic 1 Question 35

AWS Certified SysOps Administrator - Associate

Topic 1 Question 35
A company's public website is hosted in an Amazon S3 bucket in the us-east-1 Region behind an Amazon CloudFront distribution. The company wants to ensure that the website is protected from DDoS attacks. A SysOps administrator needs to deploy a solution that gives the company the ability to maintain control over the rate limit at which DDoS protections are applied. Which solution will meet these requirements?
- Deploy a global-scoped AWS WAF web ACL with an allow default action. Configure an AWS WAF rate-based rule to block matching traffic. Associate the web ACL with the CloudFront distribution.
- Deploy an AWS WAF web ACL with an allow default action in us-east-1. Configure an AWS WAF rate-based rule to block matching traffic. Associate the web ACL with the S3 bucket.
- Deploy a global-scoped AWS WAF web ACL with a block default action. Configure an AWS WAF rate-based rule to allow matching traffic. Associate the web ACL with the CloudFront distribution.
- Deploy an AWS WAF web ACL with a block default action in us-east-1. Configure an AWS WAF rate-based rule to allow matching traffic. Associate the web ACL with the S3 bucket.
ユーザの投票
コメント(8)
- 正解だと思う選択肢: A
  yes, A is the answer https://docs.aws.amazon.com/waf/latest/developerguide/classic-web-acl-default-action.html
  
  👍 5
  kati2k22cz2022/09/02
- Its global because you your are using cloudfront and it has to protect all the edge locations
  
  👍 2
  CVDON2023/02/18
- I think is A because to deliver content to users with lower latency, Amazon CloudFront uses a global network of edge locations (edge locations and regional edge caches) around the world
  
  👍 2
  brtest2023/04/19
シャッフルモード

ユーザの投票

コメント(8)