SCS-C02 · Question #294
A security engineer has noticed an unusually high amount of traffic coming from a single IP address. This was discovered by analyzing the Application Load Balancer's access logs. How can the…
The correct answer is B. Implement a rate-based rule with AWS WAF. AWS WAF provides a rate-based rule that allows you to limit the number of requests from a specific IP address within a given time frame. This is an effective way to mitigate excessive requests from an IP without fully blocking it, as it only limits the request rate. The…
Question
A security engineer has noticed an unusually high amount of traffic coming from a single IP address. This was discovered by analyzing the Application Load Balancer's access logs. How can the security engineer limit the number of requests from a specific IP address without blocking the IP address?
Options
- AAdd a rule to the Application Load Balancer to route the traffic originating from the IP address in
- BImplement a rate-based rule with AWS WAF
- CUse AWS Shield to limit the originating traffic hit rate.
- DImplement the GeoLocation feature in Amazon Route 53.
How the community answered
(35 responses)- A6% (2)
- B80% (28)
- C11% (4)
- D3% (1)
Explanation
AWS WAF provides a rate-based rule that allows you to limit the number of requests from a specific IP address within a given time frame. This is an effective way to mitigate excessive requests from an IP without fully blocking it, as it only limits the request rate. The security engineer can configure the rate-based rule to restrict requests per IP and apply it to the Application Load Balancer.
Topics
Community Discussion
No community discussion yet for this question.