nerdexam
Amazon

SCS-C02 · Question #294

A security engineer has noticed an unusually high amount of traffic coming from a single IP address. This was discovered by analyzing the Application Load Balancer's access logs. How can the…

The correct answer is B. Implement a rate-based rule with AWS WAF. AWS WAF provides a rate-based rule that allows you to limit the number of requests from a specific IP address within a given time frame. This is an effective way to mitigate excessive requests from an IP without fully blocking it, as it only limits the request rate. The…

Submitted by daniela_cl· Mar 6, 2026Infrastructure Security

Question

A security engineer has noticed an unusually high amount of traffic coming from a single IP address. This was discovered by analyzing the Application Load Balancer's access logs. How can the security engineer limit the number of requests from a specific IP address without blocking the IP address?

Options

  • AAdd a rule to the Application Load Balancer to route the traffic originating from the IP address in
  • BImplement a rate-based rule with AWS WAF
  • CUse AWS Shield to limit the originating traffic hit rate.
  • DImplement the GeoLocation feature in Amazon Route 53.

How the community answered

(35 responses)
  • A
    6% (2)
  • B
    80% (28)
  • C
    11% (4)
  • D
    3% (1)

Explanation

AWS WAF provides a rate-based rule that allows you to limit the number of requests from a specific IP address within a given time frame. This is an effective way to mitigate excessive requests from an IP without fully blocking it, as it only limits the request rate. The security engineer can configure the rate-based rule to restrict requests per IP and apply it to the Application Load Balancer.

Topics

#AWS WAF#rate-based rules#ALB#traffic throttling

Community Discussion

No community discussion yet for this question.

Full SCS-C02 Practice