Amazon
SCS-C02 · Question #392
An IT department currently has a Java web application deployed on Apache Tomcat running on Amazon EC2 instances. All traffic to the EC2 instances is sent through an internet-facing Application Load…
The correct answer is A. Create an Amazon CloudFront distribution and configure the ALB as the origin. See the full explanation below for the reasoning.
Submitted by ahmad_uae· Mar 6, 2026Threat Detection and Incident Response
Question
An IT department currently has a Java web application deployed on Apache Tomcat running on Amazon EC2 instances. All traffic to the EC2 instances is sent through an internet-facing Application Load Balancer (ALB). The Security team has noticed during the past two days thousands of unusual read requests coming from hundreds of IP addresses. This is causing the Tomcat server to run out of threads and reject new connections Which the SIMPLEST change that would address this server issue?
Options
- ACreate an Amazon CloudFront distribution and configure the ALB as the origin
- BBlock the malicious IPs with a network access list (NACL).
- CCreate an AWS Web Application Firewall (WAF). and attach it to the ALB
- DMap the application domain name to use Route 53
How the community answered
(41 responses)- A85% (35)
- B5% (2)
- C2% (1)
- D7% (3)
Topics
#DDoS Mitigation#Application Layer Attack#CloudFront#Caching
Community Discussion
No community discussion yet for this question.