SCS-C03 · Question #55
A company hosts its public website on Amazon EC2 instances behind an Application Load Balancer (ALB). The website is experiencing a global DDoS attack from a specific IoT device brand that uses a uniq
Sign in or unlock SCS-C03 to reveal the answer and full explanation for question #55. The question stem and answer options stay visible for context.
Question
A company hosts its public website on Amazon EC2 instances behind an Application Load Balancer (ALB). The website is experiencing a global DDoS attack from a specific IoT device brand that uses a unique user agent. A security engineer is creating an AWS WAF web ACL and will associate it with the ALB. Which rule statement will mitigate the current attack and future attacks from these IoT devices without blocking legitimate customers?
Options
- AUse an IP set match rule statement.
- BUse a geographic match rule statement.
- CUse a rate-based rule statement.
- DUse a string match rule statement on the user agent.
Unlock SCS-C03 to see the answer
You've previewed enough free SCS-C03 questions. Unlock SCS-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.