AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 30

Question

A company is hosting a web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The application has become the target of a DoS attack. Application logging shows that requests are coming from a small number of client IP addresses, but the addresses change regularly. The company needs to block the malicious traffic with a solution that requires the least amount of ongoing effort. Which solution meets these requirements?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Create an AWS WAF rate-based rule, and attach it to the ALB. AWS WAF protects web applications from common exploits and malicious requests.

AWS Certified Security - Specialty SCS-C02 — Question 30