nerdexam
AmazonAmazon

SAA-C03 · Question #186

SAA-C03 Question #186: Real Exam Question with Answer & Explanation

Sign in or unlock SAA-C03 to reveal the answer and full explanation for question #186. The question stem and answer options stay visible for context.

Submitted by ahmad_uae· Mar 4, 2026Design Secure Architectures

Question

A company hosts an application on Amazon EC2 instances that are part of a target group behind an Application Load Balancer (ALB). The company has attached a security group to the ALB. During a recent review of application logs, the company found many unauthorized login attempts from IP addresses that belong to countries outside the company's normal user base. The company wants to allow traffic only from the United States and Australia. Which solution will meet this requirement?

Options

  • AEdit the default network ACL to block IP addresses from outside of the allowed countries.
  • BCreate a geographic match rule in AWS WAF. Attach the rule to the ALB.
  • CConfigure the ALB security group to allow the IP addresses of company employees. Edit the
  • DUse a host-based firewall on the EC2 instances to block IP addresses from outside of the allowed

Unlock SAA-C03 to see the answer

You've previewed enough free SAA-C03 questions. Unlock SAA-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full SAA-C03 PracticeBrowse All SAA-C03 Questions