SAA-C03 · Question #205
A finance company has a web application that generates credit reports for customers. The company hosts the frontend of the web application on a fleet of Amazon EC2 instances that is associated with…
The correct answer is B. Use AWS WAF to create a web ACL. Associate the web ACL with the ALB. Use the AWS WAF. The AWS WAF Bot Control managed ruleis designed to automatically detect and mitigate bot traffic. This feature is particularly useful for addressing malicious traffic and conserving compute resources by filtering unnecessary requests at the ALB level. Option A: Blocking IP…
Question
A finance company has a web application that generates credit reports for customers. The company hosts the frontend of the web application on a fleet of Amazon EC2 instances that is associated with an Application Load Balancer (ALB). The application generates reports by running queries on an Amazon RDS for SQL Server database. The company recently discovered that malicious traffic from around the world is abusing the application by submitting unnecessary requests. The malicious traffic is consuming significant compute resources. The company needs to address the malicious traffic. Which solution will meet this requirement?
Options
- AUse AWS WAF to create a web ACL. Associate the web ACL with the ALB. Update the web ACL
- BUse AWS WAF to create a web ACL. Associate the web ACL with the ALB. Use the AWS WAF
- CSet up AWS Shield to protect the ALB and the database.
- DUse AWS WAF to create a web ACL. Associate the web ACL with the ALB. Configure the AWS
How the community answered
(31 responses)- A3% (1)
- B84% (26)
- C10% (3)
- D3% (1)
Explanation
The AWS WAF Bot Control managed ruleis designed to automatically detect and mitigate bot traffic. This feature is particularly useful for addressing malicious traffic and conserving compute resources by filtering unnecessary requests at the ALB level. Option A: Blocking IP addresses manually introduces significant operational overhead and is not scalable against dynamic, worldwide malicious traffic. Option C: AWS Shield provides DDoS protection, but the scenario does not describe a DDoS attack. WAF is better suited for managing application-layer threats like bot traffic. Option D: The AWS WAF IP reputation rule helps block traffic from known bad IPs but may not address bot traffic effectively.
Community Discussion
No community discussion yet for this question.