nerdexam
Amazon

SAA-C03 · Question #755

A company website runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances run in an Auto Scaling group across multiple Availability Zones. There is an Amazon CloudFront…

The correct answer is D. Using AWS WAF, configure a web ACL rate-based rule on the CloudFront distribution with a rate. AWS WAF allows you to create rate-based rules that limit the number of requests from specific IP addresses. By applying a WAF web ACL to the CloudFront distribution and setting a rate limit below the unwanted request rate, the solution blocks excessive traffic from malicious or…

Submitted by rania.sa· Mar 4, 2026Design Secure Architectures

Question

A company website runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances run in an Auto Scaling group across multiple Availability Zones. There is an Amazon CloudFront distribution in front of the ALB. Users are reporting performance problems. A solutions architect discovers that the website is receiving a high rate of unwanted requests to the CloudFront distribution originating from a series of source IP addresses. How should the solutions architect address this problem?

Options

  • AUsing AWS Shield, configure a deny rule with an IP match condition containing the source IPs of
  • BUsing Auto Scaling, configure the maximum instance value to an increased count that will absorb
  • CUsing an Amazon VPC network ACL, configure an inbound deny rule for each source IP CIDR
  • DUsing AWS WAF, configure a web ACL rate-based rule on the CloudFront distribution with a rate

How the community answered

(55 responses)
  • A
    13% (7)
  • B
    7% (4)
  • C
    4% (2)
  • D
    76% (42)

Explanation

AWS WAF allows you to create rate-based rules that limit the number of requests from specific IP addresses. By applying a WAF web ACL to the CloudFront distribution and setting a rate limit below the unwanted request rate, the solution blocks excessive traffic from malicious or unwanted sources, improving website performance without affecting legitimate users.

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full SAA-C03 Practice