A company hosts a cloud-based e-commerce application and only wants the application accessed from certain locations. The network team configures a cloud firewall with WAF enabled, but users can…

The correct answer is D. Configure geo-restriction. Geo-restriction (also called geographic blocking or geofencing) is a feature that limits access to a resource based on the geographic location of the requester's IP address. The WAF is already in place and running, but WAF rules (A) focus on protecting against web application…

Cloud Network Security

Question

A company hosts a cloud-based e-commerce application and only wants the application accessed from certain locations. The network team configures a cloud firewall with WAF enabled, but users can access the application globally. Which of the following should the network team do?

Options

AReconfigure WAF rules.
BConfigure a NAT gateway.
CImplement a CDN.
DConfigure geo-restriction.

How the community answered

(47 responses)

A
2% (1)
B
6% (3)
C
15% (7)
D
77% (36)

Explanation

Geo-restriction (also called geographic blocking or geofencing) is a feature that limits access to a resource based on the geographic location of the requester's IP address. The WAF is already in place and running, but WAF rules (A) focus on protecting against web application attacks (SQLi, XSS, etc.) - not on restricting by geography. Reconfiguring WAF rules alone will not enforce location-based access. A NAT gateway (B) translates private IPs to public IPs for outbound traffic and is unrelated to access restriction. A CDN (C) distributes content globally, which is the opposite of restricting access. Geo-restriction directly maps user IP locations to allowed regions and denies requests from outside those regions.

Topics

#Geo-restriction#Access Control#Cloud Firewall#Network Security Policies

Community Discussion

No community discussion yet for this question.

Full CNX-001 Practice