SAA-C03 · Question #600
A company uses AWS to host its public ecommerce website. The website uses an AWS Global Accelerator accelerator for traffic from the internet. The Global Accelerator accelerator forwards the traffic…
The correct answer is C. Configure an AWS WAF web ACL on the ALB to block traffic by using rate-based rules. https://repost.aws/knowledge-center/globalaccelerator-aws-waf-filter-layer7-traffic
Question
A company uses AWS to host its public ecommerce website. The website uses an AWS Global Accelerator accelerator for traffic from the internet. The Global Accelerator accelerator forwards the traffic to an Application Load Balancer (ALB) that is the entry point for an Auto Scaling group. The company recently identified a DDoS attack on the website. The company needs a solution to mitigate future attacks. Which solution will meet these requirements with the LEAST implementation effort?
Options
- AConfigure an AWS WAF web ACL for the Global Accelerator accelerator to block traffic by using
- BConfigure an AWS Lambda function to read the ALB metrics to block attacks by updating a VPC
- CConfigure an AWS WAF web ACL on the ALB to block traffic by using rate-based rules
- DConfigure an Amazon CloudFront distribution in front of the Global Accelerator accelerator
How the community answered
(38 responses)- A11% (4)
- B5% (2)
- C82% (31)
- D3% (1)
Explanation
https://repost.aws/knowledge-center/globalaccelerator-aws-waf-filter-layer7-traffic
Community Discussion
No community discussion yet for this question.