Exam AWS Certified SysOps Administrator - Associate topic 1 question 35 discussion

yes, A is the answer https://docs.aws.amazon.com/waf/latest/developerguide/classic-web-acl-default-action.html

A is the correct ans. here

Your configuration of your own rules and rule groups depends in part on whether you want to allow or block most web requests. For example, if you want to allow most requests, you would set the web ACL default action to Allow, and then add rules that identify web requests that you want to block, such as the following: Requests that originate from IP addresses that are making an unreasonable number of requests Requests that originate from countries that either you don't do business in or are the frequent source of attacks Requests that include fake values in the User-agent header Requests that appear to include malicious SQL code https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-default-action.html

A is Correct

Answer: A https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-default-action.html

I think the key point here is "control over the rate limit at which DDoS protections are applied.", if you want to mantain this control A is the answer, the other option C blocks by default everything.

With rate-based rules, you only have Block, Count and Captcha. You don't have Allow. So A is incorrect. C is the good one.

With rate-based rules, you only have Block, Count and Captcha. You don't have Allow. So A is incorrect. C is the good one.

I think is A because to deliver content to users with lower latency, Amazon CloudFront uses a global network of edge locations (edge ​​locations and regional edge caches) around the world

Its global because you your are using cloudfront and it has to protect all the edge locations

why not C? default action is blocked but matching traffic allowed. That means only us region is allowed with a rate limit.

I think A

Why global scoped? Answer should be B.