SAP-C02 · Question #653
A company is developing a web application that runs on Amazon EC2 instances in an Auto Scaling group behind a public-facing Application Load Balancer (ALB). Only users from a specific country are…
The correct answer is B. Create an AWS WAF web ACL. Configure a rule to block any requests that do not originate from. https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-geo-match.html
Question
A company is developing a web application that runs on Amazon EC2 instances in an Auto Scaling group behind a public-facing Application Load Balancer (ALB). Only users from a specific country are allowed to access the application. The company needs the ability to log the access requests that have been blocked. The solution should require the least possible maintenance. Which solution meets these requirements?
Options
- ACreate an IPSet containing a list of IP ranges that belong to the specified country. Create an AWS
- BCreate an AWS WAF web ACL. Configure a rule to block any requests that do not originate from
- CConfigure AWS Shield to block any requests that do not originate from the specified country.
- DCreate a security group rule that allows ports 80 and 443 from IP ranges that belong to the
How the community answered
(23 responses)- A4% (1)
- B83% (19)
- C4% (1)
- D9% (2)
Explanation
https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-geo-match.html
Community Discussion
No community discussion yet for this question.