nerdexam
AmazonAmazon

SAP-C02 · Question #515

SAP-C02 Question #515: Real Exam Question with Answer & Explanation

Sign in or unlock SAP-C02 to reveal the answer and full explanation for question #515. The question stem and answer options stay visible for context.

Submitted by eva_at· Mar 6, 2026Continuous Improvement for Existing Solutions

Question

An education company is running a web application used by college students around the world. The application runs in an Amazon Elastic Container Service (Amazon ECS) cluster in an Auto Scaling group behind an Application Load Balancer (ALB). A system administrator detects a weekly spike in the number of failed login attempts, which overwhelm the application's authentication service. All the failed login attempts originate from about 500 different IP addresses that change each week. A solutions architect must prevent the failed login attempts from overwhelming the authentication service. Which solution meets these requirements with the MOST operational efficiency?

Options

  • AUse AWS Firewall Manager to create a security group and security group policy to deny access
  • BCreate an AWS WAF web ACL with a rate-based rule, and set the rule action to Block. Connect
  • CUse AWS Firewall Manager to create a security group and security group policy to allow access
  • DCreate an AWS WAF web ACL with an IP set match rule, and set the rule action to Block.

Unlock SAP-C02 to see the answer

You've previewed enough free SAP-C02 questions. Unlock SAP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full SAP-C02 PracticeBrowse All SAP-C02 Questions