Exam AWS Certified Security - Specialty SCS-C02 topic 1 question 283 discussion

Exam question from Amazon's AWS Certified Security - Specialty SCS-C02

Question #: 283
Topic #: 1

[All AWS Certified Security - Specialty SCS-C02 Questions]

A security engineer has noticed an unusually high amount of traffic coming from a single IP address. This was discovered by analyzing the Application Load Balancer’s access logs.

How can the security engineer limit the number of requests from a specific IP address without blocking the IP address?

A. Add a rule to the Application Load Balancer to route the traffic originating from the IP address in question and show a static webpage.
B. Implement a rate-based rule with AWS WAF.
C. Use AWS Shield to limit the originating traffic hit rate.
D. Implement the GeoLocation feature in Amazon Route 53.

Show Suggested Answer

Suggested Answer: B 🗳️

by Pmktechno at Dec. 29, 2024, 11:46 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

Pmktechno

5 months, 2 weeks ago

Selected Answer: B

WS WAF (Web Application Firewall) allows you to create rate-based rules that can limit the number of requests from a specific IP address. This way, you can control the traffic without completely blocking the IP address, ensuring that legitimate traffic is still allowed through at a controlled rate.

upvoted 2 times

Jfelite

1 month, 2 weeks ago

why not shield?

upvoted 1 times

Sat897

2 days, 22 hours ago

This is not DDOS attack. to use shield

upvoted 1 times

...