exam questions

Exam AWS Certified Security - Specialty SCS-C02 All Questions

View all questions & answers for the AWS Certified Security - Specialty SCS-C02 exam

Exam AWS Certified Security - Specialty SCS-C02 topic 1 question 30 discussion

A company is hosting a web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The application has become the target of a DoS attack. Application logging shows that requests are coming from a small number of client IP addresses, but the addresses change regularly.
The company needs to block the malicious traffic with a solution that requires the least amount of ongoing effort.
Which solution meets these requirements?

  • A. Create an AWS WAF rate-based rule, and attach it to the ALB.
  • B. Update the security group that is attached to the ALB to block the attacking IP addresses.
  • C. Update the ALB subnet's network ACL to block the attacking client IP addresses.
  • D. Create an AWS WAF rate-based rule, and attach it to the security group of the EC2 instances.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
FunkyFresco
3 months, 2 weeks ago
Selected Answer: A
A without any doubt.
upvoted 1 times
...
navid1365
7 months ago
Selected Answer: A
Attach a WAF to the ALB
upvoted 1 times
...
Sodev
8 months ago
What's that mean "a small number of client IP addresses, but the addresses change regularly.": v if small number, why not use C =)) i thing this question not exactlty, "small" is redundant words ?
upvoted 2 times
khuman_12
6 months, 2 weeks ago
Exactly, the question is incorrect. And answer A: in other words "just create rate-limit and all DDoS will take up all the limit and the service will down"
upvoted 1 times
...
...
Raphaello
11 months, 3 weeks ago
Selected Answer: A
A WAF rate-based rule and attach it to ALB.
upvoted 1 times
...
Aamee
1 year ago
Selected Answer: A
WAF protects CloudFront, R53 and ALB as they're tightly integrated with WAF.
upvoted 1 times
...
Daniel76
1 year ago
Selected Answer: A
AWS WAF can be deployed on Amazon CloudFront, the Application Load Balancer (ALB), Amazon API Gateway, and AWS AppSync.
upvoted 4 times
smanzana
10 months, 3 weeks ago
Indeed, AWS WAF cannot be directly attached to the Security Group of EC2 instances.
upvoted 1 times
...
...
They could of used the VPC flow logs to figure out the IPs that are attacking then use lambda to update the ACL NACL for the LB. it would be better than actually applying rate limiting.
upvoted 1 times
Josh1217
8 months, 3 weeks ago
The IPs keep on changing.
upvoted 1 times
...
...
100fold
1 year, 1 month ago
Selected Answer: A
Answer A https://www.examtopics.com/discussions/amazon/view/61173-exam-aws-certified-security-specialty-topic-1-question-259/
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...