SAP-C02 · Question #365
An education company is running a web application used by college students around the world. The application runs in an Amazon Elastic Container Service {Amazon ECS) cluster in an Auto Scaling group…
The correct answer is B. Create an AWS WAF web ACL with a rate-based rule, and set the rule action to Block. Connect. https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-rate-based.html The IP set match statement inspects the IP address of a web request against a set of IP addresses and address ranges. Use this to allow or block web requests based on the IP addresses…
Question
An education company is running a web application used by college students around the world. The application runs in an Amazon Elastic Container Service {Amazon ECS) cluster in an Auto Scaling group behind an Application Load Balancer (ALB). A system administrator detects a weekly spike in the number of failed login attempts, which overwhelm the application's authentication service. All the failed login attempts originate from about 500 different IP addresses that change each week, A solutions architect must prevent the failed login attempts from overwhelming the authentication service. Which solution meets these requirements with the MOST operational efficiency?
Options
- AUse AWS Firewall Manager to create a security group and security group policy to deny access
- BCreate an AWS WAF web ACL with a rate-based rule, and set the rule action to Block. Connect
- CUse AWS Firewall Manager to create a security group and security group policy to allow access
- DCreate an AWS WAF web ACL with an IP set match rule, and set the rule action to Block.
How the community answered
(16 responses)- A13% (2)
- B75% (12)
- C6% (1)
- D6% (1)
Explanation
https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-rate-based.html The IP set match statement inspects the IP address of a web request against a set of IP addresses and address ranges. Use this to allow or block web requests based on the IP addresses that the requests originate from. By default, AWS WAF uses the IP address from the web request origin, but you can configure the rule to use an http header like X-Forwarded-For https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-ipset- https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-rate-based.html
Community Discussion
No community discussion yet for this question.